General
- Target SakuraaModLoader.Assets.SakuraaCameraClient.exe
- Size 12.7MB
- Sample260928-ml2vwsac46
- SHA256 50f7b963ff470ef5884c8b341cd03b3e2a5d874cbe8af2d83e5334472957fdfa
- MD5 3d0c58e37e8cb62c60ebe9d6d23334a9
- SHA1 4b2f94bc026340c1c1f27b90f6ad639103eb58c4
- SHA512 40701ec276840d4eb5fdbac187a8163fef1b7e521b722d57924c759a3ae06e3c53861c2b752b5698170b4d17eb11a8a0befec59a3ba15d5a00905f8eeb7352c2
- SSDEEP 196608:phjcPCbE9eFxg1q7jG4VP5uM2ykool86BNUQsWP+r+HNX2Hwmqcf5:pppE9oa1qe4VP5d2D8ORsqkf5
- TLSH T1DDD623ED55D4A2F0E4E38600729B43E93191665C81FE4C197AD62D012B26CBFB28EDF7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
SakuraaModLoader.Assets.SakuraaCameraClient.exe
Resource
win10v2004-20260911-en
3 signatures
900 seconds
Behavioral task
behavioral2
Sample
SakuraaModLoader.Assets.SakuraaCameraClient.exe
Resource
win11ltsc2024-20260911-en
14 signatures
900 seconds
Malware Config
Targets
-
- Target SakuraaModLoader.Assets.SakuraaCameraClient.exe
- Size 12.7MB
- SHA256 50f7b963ff470ef5884c8b341cd03b3e2a5d874cbe8af2d83e5334472957fdfa
- MD5 3d0c58e37e8cb62c60ebe9d6d23334a9
- SHA1 4b2f94bc026340c1c1f27b90f6ad639103eb58c4
- SHA512 40701ec276840d4eb5fdbac187a8163fef1b7e521b722d57924c759a3ae06e3c53861c2b752b5698170b4d17eb11a8a0befec59a3ba15d5a00905f8eeb7352c2
- SSDEEP 196608:phjcPCbE9eFxg1q7jG4VP5uM2ykool86BNUQsWP+r+HNX2Hwmqcf5:pppE9oa1qe4VP5d2D8ORsqkf5
- TLSH T1DDD623ED55D4A2F0E4E38600729B43E93191665C81FE4C197AD62D012B26CBFB28EDF7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.