Analysis
- max time kernel
150s - max time network
147s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
10/09/2026, 02:36
General
- Target jaffacakes118_Tracker.Software.PDF-XChange.Viewer.Pro.v2.046.Multilingual.Cracked-EAT.exe
- Size 3.2MB
- Sample260910-c3kmtsthrb
- SHA256 e9806dd67c6854d5fee005aea848eadd30948583048892769da573dd228ace80
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 7 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Tracker.Software.PDF-XChange.Viewer.Pro.v2.046.Multilingual.Cracked-EAT.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Tracker.Software.PDF-XChange.Viewer.Pro.v2.046.Multilingual.Cracked-EAT.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1180-0-0x00007FFA8F57A000-0x00007FFA8F57B000-memory.dmp
memory/1180-1-0x00007FFA8F280000-0x00007FFA8FCB8000-memory.dmp
memory/1180-4-0x000000001BD20000-0x000000001BD82000-memory.dmp
memory/1180-2-0x000000001B6A0000-0x000000001BB6E000-memory.dmp
memory/1180-3-0x000000001BC10000-0x000000001BCAC000-memory.dmp
memory/1180-7-0x00007FFA8F280000-0x00007FFA8FCB8000-memory.dmp
memory/1180-5-0x000000001C260000-0x000000001C330000-memory.dmp
memory/1180-8-0x00007FFA8F280000-0x00007FFA8FCB8000-memory.dmp
memory/1180-9-0x00007FFA8F280000-0x00007FFA8FCB8000-memory.dmp
memory/1180-10-0x00007FFA8F280000-0x00007FFA8FCB8000-memory.dmp
memory/1180-11-0x00007FFA8F280000-0x00007FFA8FCB8000-memory.dmp
memory/1180-12-0x0000000000A80000-0x0000000000A88000-memory.dmp
memory/1180-13-0x00007FFA8F280000-0x00007FFA8FCB8000-memory.dmp
memory/1180-14-0x00007FFA8F280000-0x00007FFA8FCB8000-memory.dmp
memory/1180-15-0x00007FFA8F280000-0x00007FFA8FCB8000-memory.dmp
memory/1180-16-0x00007FFA8F280000-0x00007FFA8FCB8000-memory.dmp
memory/1180-17-0x00007FFA8F280000-0x00007FFA8FCB8000-memory.dmp
memory/1180-18-0x00007FFA8F280000-0x00007FFA8FCB8000-memory.dmp
memory/1180-19-0x00007FFA8F280000-0x00007FFA8FCB8000-memory.dmp
memory/1180-20-0x00007FFA8F280000-0x00007FFA8FCB8000-memory.dmp