Analysis
- max time kernel
149s - max time network
149s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
10/09/2026, 02:38
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_Portable VLc 0.9.3.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_Portable VLc 0.9.3.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
General
- Target jaffacakes118_Portable VLc 0.9.3.exe
- Size 610KB
- Sample260910-c45dmawyet
- SHA256 5891fc4c269ef3ede37b063fa01aaa472fb86917652e159064d097f00705ab7b
- MD5 c5346ecab7ca378cc3f420f3ac1b934a
- SHA1 59d9d3d764adc2fa619cc0e8fe678c2b2c3ca420
- SHA512 c04c65ba5fdd1d6ccab8b37d7ac3438a67f881b500748eb85c7a3bedaa4d0bfc77603d2e75d70c1a319ebaabb15ce1b10ceb8fea76af8fe86cbf7bb12d223d5d
- SSDEEP 12288:tty1nJIqG1aoxOtkbNcsqggTnlZkO+2vNHW482AN:vKa1alOie07/THWaAN
- TLSH T12ED4F1006A805665E8593530DE79E67213EABE3DE8A127075FF47D8B3BFF0C39426906
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 4148 jaffacakes118_Portable VLc 0.9.3.exe - Suspicious use of WriteProcessMemory 1 IoCs
description pid Process procid_target PID 4148 wrote to memory of 668 4148 jaffacakes118_Portable VLc 0.9.3.exe 86
Processes
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Portable VLc 0.9.3.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Portable VLc 0.9.3.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:4148 -
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Portable VLc 0.9.3.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Portable VLc 0.9.3.exe"2⤵PID:668
-