Analysis
- max time kernel
148s - max time network
131s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
10/09/2026, 02:36
General
- Target jaffacakes118_Die geheimen Armeen der NATO.exe
- Size 4.9MB
- Sample260910-c3npgswycx
- SHA256 1254452128b2fbe581f4cce54297aa33480b430b45426c8f693a2120a822d786
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 7 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Die geheimen Armeen der NATO.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Die geheimen Armeen der NATO.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/976-0-0x00007FFE1CACA000-0x00007FFE1CACB000-memory.dmp
memory/976-1-0x00007FFE1C7D0000-0x00007FFE1D208000-memory.dmp
memory/976-2-0x000000001BAA0000-0x000000001BF6E000-memory.dmp
memory/976-3-0x000000001C010000-0x000000001C0AC000-memory.dmp
memory/976-5-0x00007FFE1C7D0000-0x00007FFE1D208000-memory.dmp
memory/976-4-0x000000001C120000-0x000000001C182000-memory.dmp
memory/976-6-0x000000001C660000-0x000000001C730000-memory.dmp
memory/976-8-0x00007FFE1C7D0000-0x00007FFE1D208000-memory.dmp
memory/976-9-0x00007FFE1C7D0000-0x00007FFE1D208000-memory.dmp
memory/976-10-0x00007FFE1C7D0000-0x00007FFE1D208000-memory.dmp
memory/976-11-0x00007FFE1C7D0000-0x00007FFE1D208000-memory.dmp
memory/976-13-0x00007FFE1C7D0000-0x00007FFE1D208000-memory.dmp
memory/976-12-0x0000000000E70000-0x0000000000E78000-memory.dmp
memory/976-14-0x00007FFE1C7D0000-0x00007FFE1D208000-memory.dmp
memory/976-15-0x00007FFE1C7D0000-0x00007FFE1D208000-memory.dmp
memory/976-16-0x00007FFE1C7D0000-0x00007FFE1D208000-memory.dmp
memory/976-17-0x00007FFE1C7D0000-0x00007FFE1D208000-memory.dmp
memory/976-18-0x00007FFE1C7D0000-0x00007FFE1D208000-memory.dmp