Analysis

  • max time kernel
    149s
  • max time network
    148s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    10/09/2026, 02:36

General

  • Target
    jaffacakes118_Die geheimen Armeen der NATO.exe
  • Size 4.9MB
  • Sample260910-c3npgswycx
  • SHA256 1254452128b2fbe581f4cce54297aa33480b430b45426c8f693a2120a822d786
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 7 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Die geheimen Armeen der NATO.exe
    "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Die geheimen Armeen der NATO.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:3732

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        memory/3732-0-0x00007FFDF3695000-0x00007FFDF3696000-memory.dmp

        memory/3732-1-0x00007FFDF33E0000-0x00007FFDF3D81000-memory.dmp

        memory/3732-2-0x00007FFDF33E0000-0x00007FFDF3D81000-memory.dmp

        memory/3732-5-0x000000001BF50000-0x000000001BFEC000-memory.dmp

        memory/3732-6-0x000000001C060000-0x000000001C0C2000-memory.dmp

        memory/3732-7-0x00007FFDF33E0000-0x00007FFDF3D81000-memory.dmp

        memory/3732-4-0x000000001B9E0000-0x000000001BEAE000-memory.dmp

        memory/3732-8-0x000000001C5A0000-0x000000001C670000-memory.dmp

        memory/3732-10-0x00007FFDF33E0000-0x00007FFDF3D81000-memory.dmp

        memory/3732-3-0x00007FFDF33E0000-0x00007FFDF3D81000-memory.dmp

        memory/3732-11-0x00007FFDF33E0000-0x00007FFDF3D81000-memory.dmp

        memory/3732-12-0x00007FFDF33E0000-0x00007FFDF3D81000-memory.dmp

        memory/3732-13-0x00007FFDF33E0000-0x00007FFDF3D81000-memory.dmp

        memory/3732-14-0x00007FFDF33E0000-0x00007FFDF3D81000-memory.dmp

        memory/3732-15-0x00007FFDF33E0000-0x00007FFDF3D81000-memory.dmp

        memory/3732-16-0x00007FFDF33E0000-0x00007FFDF3D81000-memory.dmp

        memory/3732-18-0x0000000000EE0000-0x0000000000EE8000-memory.dmp

        memory/3732-17-0x00007FFDF33E0000-0x00007FFDF3D81000-memory.dmp

        memory/3732-19-0x00007FFDF33E0000-0x00007FFDF3D81000-memory.dmp

        memory/3732-20-0x00007FFDF33E0000-0x00007FFDF3D81000-memory.dmp

        memory/3732-21-0x00007FFDF33E0000-0x00007FFDF3D81000-memory.dmp

        memory/3732-22-0x00007FFDF33E0000-0x00007FFDF3D81000-memory.dmp

        memory/3732-23-0x00007FFDF33E0000-0x00007FFDF3D81000-memory.dmp

        memory/3732-24-0x00007FFDF33E0000-0x00007FFDF3D81000-memory.dmp

        memory/3732-25-0x00007FFDF33E0000-0x00007FFDF3D81000-memory.dmp

        memory/3732-27-0x00007FFDF33E0000-0x00007FFDF3D81000-memory.dmp