Analysis
- max time kernel
150s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
10/09/2026, 02:23
General
- Target jaffacakes118_Is It Real.- Das Bermuda Dreieck Doku DivX.exe
- Size 7.7MB
- Sample260910-cvcbgswvd1
- SHA256 a817b814af4eab4c450d73aa321f698779f925e9d20d174aaee8e9545701c013
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 7 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Is It Real.- Das Bermuda Dreieck Doku DivX.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Is It Real.- Das Bermuda Dreieck Doku DivX.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4544-0-0x00007FFA3910A000-0x00007FFA3910B000-memory.dmp
memory/4544-1-0x00007FFA38E10000-0x00007FFA39848000-memory.dmp
memory/4544-3-0x000000001C090000-0x000000001C12C000-memory.dmp
memory/4544-4-0x000000001C1A0000-0x000000001C202000-memory.dmp
memory/4544-2-0x000000001BB20000-0x000000001BFEE000-memory.dmp
memory/4544-5-0x000000001C6E0000-0x000000001C7B0000-memory.dmp
memory/4544-7-0x00007FFA38E10000-0x00007FFA39848000-memory.dmp
memory/4544-8-0x00007FFA38E10000-0x00007FFA39848000-memory.dmp
memory/4544-9-0x00007FFA38E10000-0x00007FFA39848000-memory.dmp
memory/4544-10-0x00007FFA38E10000-0x00007FFA39848000-memory.dmp
memory/4544-11-0x00007FFA38E10000-0x00007FFA39848000-memory.dmp
memory/4544-12-0x0000000001010000-0x0000000001018000-memory.dmp
memory/4544-13-0x00007FFA38E10000-0x00007FFA39848000-memory.dmp
memory/4544-14-0x00007FFA38E10000-0x00007FFA39848000-memory.dmp
memory/4544-15-0x00007FFA38E10000-0x00007FFA39848000-memory.dmp
memory/4544-16-0x00007FFA38E10000-0x00007FFA39848000-memory.dmp
memory/4544-17-0x00007FFA38E10000-0x00007FFA39848000-memory.dmp
memory/4544-18-0x00007FFA38E10000-0x00007FFA39848000-memory.dmp
memory/4544-19-0x00007FFA38E10000-0x00007FFA39848000-memory.dmp
memory/4544-20-0x00007FFA38E10000-0x00007FFA39848000-memory.dmp
memory/4544-21-0x00007FFA38E10000-0x00007FFA39848000-memory.dmp