15fea3cbd7ff42d5f8458bb8f46b05c3ffea5724b760f91eb4c658b89d82876a

Analysis

max time kernel
148s
max time network
115s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
08/08/2026, 17:52

Target
SAKURAA.dll
Size 3.4MB
Sample260808-wfpstasaph
SHA256 15fea3cbd7ff42d5f8458bb8f46b05c3ffea5724b760f91eb4c658b89d82876a
MD5 35440f3e6ac74cccb192b3c23a2b95ef
SHA1 45c62c69d3b64abfed6f674175fc3638e8090616
SHA512 c80f28f7ec94b0b7e6544c7787aaa472d4253fc1562ea89166000c1d129fabc3dd65a475e4a1bd232bc4f88393afee717f93c2fa0087071f36b4b3fd5ea2ec19
SSDEEP 49152:JD59DZ88NHfxCDKWyoZDigpwnWbC63yoPcL96K2+buYLC32MBt1lzo:JDJlZUMewnyN3yD52+bDLCGMBtDk
TLSH
T1EBF523C628C34D71E01BFB75829B7A6CF01E3BA14A669E5F37896D84CF63611843B742
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs

pid	Process
1244	rundll32.exe
1244	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\SAKURAA.dll,#1
1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
PID:1244

memory/1244-0-0x0000000013005000-0x0000000013214000-memory.dmp

Download