Analysis
- max time kernel
149s - max time network
133s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
10/09/2026, 02:45
General
- Target jaffacakes118_Der.Prinz.aus.Zamunda.1988.German.AC3D.720p.BluRay.x264-SHD.exe
- Size 3.5MB
- Sample260910-c8znyavbph
- SHA256 5d6b91f0411c172923a2b16700454e6b728b2cd1dc9071dbe99c06f22b44422f
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 5 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Der.Prinz.aus.Zamunda.1988.German.AC3D.720p.BluRay.x264-SHD.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Der.Prinz.aus.Zamunda.1988.German.AC3D.720p.BluRay.x264-SHD.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/5372-0-0x00007FFA7694A000-0x00007FFA7694B000-memory.dmp
memory/5372-1-0x00007FFA76650000-0x00007FFA77088000-memory.dmp
memory/5372-2-0x000000001B9B0000-0x000000001BE7E000-memory.dmp
memory/5372-5-0x00007FFA76650000-0x00007FFA77088000-memory.dmp
memory/5372-6-0x000000001C570000-0x000000001C640000-memory.dmp
memory/5372-4-0x000000001C030000-0x000000001C092000-memory.dmp
memory/5372-3-0x000000001BF20000-0x000000001BFBC000-memory.dmp
memory/5372-8-0x00007FFA76650000-0x00007FFA77088000-memory.dmp
memory/5372-9-0x00007FFA76650000-0x00007FFA77088000-memory.dmp
memory/5372-10-0x00007FFA76650000-0x00007FFA77088000-memory.dmp
memory/5372-12-0x0000000000D70000-0x0000000000D78000-memory.dmp
memory/5372-11-0x00007FFA76650000-0x00007FFA77088000-memory.dmp
memory/5372-13-0x00007FFA76650000-0x00007FFA77088000-memory.dmp
memory/5372-14-0x00007FFA76650000-0x00007FFA77088000-memory.dmp
memory/5372-16-0x00007FFA76650000-0x00007FFA77088000-memory.dmp
memory/5372-15-0x00007FFA76650000-0x00007FFA77088000-memory.dmp
memory/5372-17-0x00007FFA76650000-0x00007FFA77088000-memory.dmp