Analysis
- max time kernel
148s - max time network
147s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
10/09/2026, 02:38
General
- Target jaffacakes118_Der.Womanizer.Die.Nacht.der.Exfreundinnen.German.DVDSCR.LD.XviD-Flowzn.exe
- Size 3.1MB
- Sample260910-c4289sdk91
- SHA256 a53222fa6fa53ba101fb082741b1d63f5388596fdd29a9acaca02c0a768b0806
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 9 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Der.Womanizer.Die.Nacht.der.Exfreundinnen.German.DVDSCR.LD.XviD-Flowzn.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Der.Womanizer.Die.Nacht.der.Exfreundinnen.German.DVDSCR.LD.XviD-Flowzn.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4204-0-0x00007FF8B919A000-0x00007FF8B919B000-memory.dmp
memory/4204-1-0x00007FF8B8EA0000-0x00007FF8B98D8000-memory.dmp
memory/4204-2-0x00007FF8B8EA0000-0x00007FF8B98D8000-memory.dmp
memory/4204-3-0x000000001C320000-0x000000001C7EE000-memory.dmp
memory/4204-4-0x000000001C890000-0x000000001C92C000-memory.dmp
memory/4204-5-0x000000001C9A0000-0x000000001CA02000-memory.dmp
memory/4204-7-0x000000001CEE0000-0x000000001CFB0000-memory.dmp
memory/4204-6-0x00007FF8B8EA0000-0x00007FF8B98D8000-memory.dmp
memory/4204-9-0x00007FF8B8EA0000-0x00007FF8B98D8000-memory.dmp
memory/4204-10-0x00007FF8B8EA0000-0x00007FF8B98D8000-memory.dmp
memory/4204-11-0x00007FF8B8EA0000-0x00007FF8B98D8000-memory.dmp
memory/4204-12-0x00007FF8B8EA0000-0x00007FF8B98D8000-memory.dmp
memory/4204-13-0x00007FF8B8EA0000-0x00007FF8B98D8000-memory.dmp
memory/4204-14-0x00007FF8B8EA0000-0x00007FF8B98D8000-memory.dmp
memory/4204-15-0x00007FF8B8EA0000-0x00007FF8B98D8000-memory.dmp
memory/4204-17-0x0000000002790000-0x0000000002798000-memory.dmp
memory/4204-16-0x00007FF8B8EA0000-0x00007FF8B98D8000-memory.dmp
memory/4204-19-0x00007FF8B8EA0000-0x00007FF8B98D8000-memory.dmp
memory/4204-18-0x00007FF8B8EA0000-0x00007FF8B98D8000-memory.dmp
memory/4204-20-0x00007FF8B8EA0000-0x00007FF8B98D8000-memory.dmp
memory/4204-21-0x00007FF8B8EA0000-0x00007FF8B98D8000-memory.dmp
memory/4204-22-0x00007FF8B8EA0000-0x00007FF8B98D8000-memory.dmp
memory/4204-23-0x00007FF8B8EA0000-0x00007FF8B98D8000-memory.dmp