Analysis
- max time kernel
148s - max time network
145s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260710-en - resource tags
- submitted
10/09/2026, 03:31
General
- Target jaffacakes118_Ashampoo Photo Commander 6.50.exe
- Size 3.1MB
- Sample260910-d2388awcja
- SHA256 c740f0ffae7748e82372f6fbf32f5b05a4426e608748f0842fd31bdcf589b900
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 9 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Ashampoo Photo Commander 6.50.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Ashampoo Photo Commander 6.50.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4360-0-0x00007FFE3359A000-0x00007FFE3359B000-memory.dmp
memory/4360-1-0x00007FFE332A0000-0x00007FFE33CD8000-memory.dmp
memory/4360-2-0x00007FFE332A0000-0x00007FFE33CD8000-memory.dmp
memory/4360-4-0x000000001BD40000-0x000000001BDDC000-memory.dmp
memory/4360-3-0x000000001B7D0000-0x000000001BC9E000-memory.dmp
memory/4360-5-0x000000001BE50000-0x000000001BEB2000-memory.dmp
memory/4360-6-0x000000001C390000-0x000000001C460000-memory.dmp
memory/4360-8-0x00007FFE332A0000-0x00007FFE33CD8000-memory.dmp
memory/4360-9-0x00007FFE332A0000-0x00007FFE33CD8000-memory.dmp
memory/4360-10-0x00007FFE332A0000-0x00007FFE33CD8000-memory.dmp
memory/4360-11-0x00007FFE332A0000-0x00007FFE33CD8000-memory.dmp
memory/4360-12-0x00007FFE332A0000-0x00007FFE33CD8000-memory.dmp
memory/4360-13-0x00007FFE332A0000-0x00007FFE33CD8000-memory.dmp
memory/4360-14-0x00007FFE332A0000-0x00007FFE33CD8000-memory.dmp
memory/4360-15-0x00007FFE332A0000-0x00007FFE33CD8000-memory.dmp
memory/4360-16-0x0000000000C70000-0x0000000000C78000-memory.dmp
memory/4360-17-0x00007FFE332A0000-0x00007FFE33CD8000-memory.dmp
memory/4360-18-0x00007FFE332A0000-0x00007FFE33CD8000-memory.dmp
memory/4360-19-0x00007FFE332A0000-0x00007FFE33CD8000-memory.dmp
memory/4360-20-0x00007FFE332A0000-0x00007FFE33CD8000-memory.dmp
memory/4360-21-0x00007FFE332A0000-0x00007FFE33CD8000-memory.dmp
memory/4360-22-0x00007FFE332A0000-0x00007FFE33CD8000-memory.dmp
memory/4360-23-0x00007FFE332A0000-0x00007FFE33CD8000-memory.dmp