Akira: SoftPerfect Network Scanner and Invoke-ShareFinder Share Discovery

Ibrahim Saud@tektrix

•updated Jun 29, 2026•0•0•3

Detects malicious network discovery and enumeration activities associated with Akira ransomware. This includes the execution of SoftPerfect Network Scanner (netscan.exe) for port/service scanning and the use of the PowerView Invoke-ShareFinder module for identifying accessible network shares, often observed in post-compromise intrusion phases.