Analysis
- max time kernel
150s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
10/09/2026, 02:44
General
- Target jaffacakes118_Der.Ueberfall.Deutschlands.Krieg.gegen.Polen.GERMAN.DOKU.WS.dTV.XviD-WiM _mirror_.exe
- Size 1.1MB
- Sample260910-c8naxaeg86
- SHA256 d5a9d2791dbc0f1953726cc6f5ac744c09e10b79f5ea4a711c66f9a20fdb73fd
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 7 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Der.Ueberfall.Deutschlands.Krieg.gegen.Polen.GERMAN.DOKU.WS.dTV.XviD-WiM _mirror_.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Der.Ueberfall.Deutschlands.Krieg.gegen.Polen.GERMAN.DOKU.WS.dTV.XviD-WiM _mirror_.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4124-0-0x00007FFD90A7A000-0x00007FFD90A7B000-memory.dmp
memory/4124-1-0x00007FFD90780000-0x00007FFD911B8000-memory.dmp
memory/4124-4-0x000000001CB10000-0x000000001CB72000-memory.dmp
memory/4124-3-0x000000001CA00000-0x000000001CA9C000-memory.dmp
memory/4124-2-0x000000001C490000-0x000000001C95E000-memory.dmp
memory/4124-5-0x000000001D050000-0x000000001D120000-memory.dmp
memory/4124-7-0x00007FFD90780000-0x00007FFD911B8000-memory.dmp
memory/4124-8-0x00007FFD90780000-0x00007FFD911B8000-memory.dmp
memory/4124-9-0x00007FFD90780000-0x00007FFD911B8000-memory.dmp
memory/4124-11-0x0000000001980000-0x0000000001988000-memory.dmp
memory/4124-10-0x00007FFD90780000-0x00007FFD911B8000-memory.dmp
memory/4124-12-0x00007FFD90780000-0x00007FFD911B8000-memory.dmp
memory/4124-13-0x00007FFD90780000-0x00007FFD911B8000-memory.dmp
memory/4124-14-0x00007FFD90780000-0x00007FFD911B8000-memory.dmp
memory/4124-15-0x00007FFD90780000-0x00007FFD911B8000-memory.dmp