Analysis
- max time kernel
150s - max time network
150s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
- submitted
10/09/2026, 02:38
General
- Target jaffacakes118_Der.Ueberfall.Deutschlands.Krieg.gegen.Polen.GERMAN.DOKU.WS.dTV.XviD-WiM.exe
- Size 6.6MB
- Sample260910-c4sd3avald
- SHA256 53267aecfcb490be9c3cc59237c64eaf226101362025df11cbfa897dea71d665
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 5 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Der.Ueberfall.Deutschlands.Krieg.gegen.Polen.GERMAN.DOKU.WS.dTV.XviD-WiM.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Der.Ueberfall.Deutschlands.Krieg.gegen.Polen.GERMAN.DOKU.WS.dTV.XviD-WiM.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3512-0-0x00007FF93A855000-0x00007FF93A856000-memory.dmp
memory/3512-1-0x00007FF93A5A0000-0x00007FF93AF41000-memory.dmp
memory/3512-2-0x00007FF93A5A0000-0x00007FF93AF41000-memory.dmp
memory/3512-3-0x000000001B4C0000-0x000000001B98E000-memory.dmp
memory/3512-4-0x000000001BA30000-0x000000001BACC000-memory.dmp
memory/3512-5-0x000000001BB40000-0x000000001BBA2000-memory.dmp
memory/3512-6-0x000000001C080000-0x000000001C150000-memory.dmp
memory/3512-8-0x00007FF93A5A0000-0x00007FF93AF41000-memory.dmp
memory/3512-9-0x00007FF93A5A0000-0x00007FF93AF41000-memory.dmp
memory/3512-11-0x00007FF93A5A0000-0x00007FF93AF41000-memory.dmp
memory/3512-10-0x00007FF93A5A0000-0x00007FF93AF41000-memory.dmp
memory/3512-12-0x0000000000AC0000-0x0000000000AC8000-memory.dmp
memory/3512-13-0x00007FF93A5A0000-0x00007FF93AF41000-memory.dmp
memory/3512-14-0x00007FF93A5A0000-0x00007FF93AF41000-memory.dmp
memory/3512-15-0x00007FF93A5A0000-0x00007FF93AF41000-memory.dmp
memory/3512-16-0x00007FF93A5A0000-0x00007FF93AF41000-memory.dmp
memory/3512-17-0x00007FF93A5A0000-0x00007FF93AF41000-memory.dmp
memory/3512-19-0x00007FF93A5A0000-0x00007FF93AF41000-memory.dmp