Analysis
- max time kernel
149s - max time network
147s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
- submitted
10/09/2026, 03:31
General
- Target jaffacakes118_Avatar.Aufbruch.nach.Pandora.2009.Telesync.German.XviD-2Brothers _mirror_.exe
- Size 4.7MB
- Sample260910-d23mpaem51
- SHA256 558d45ab9263470963a13822f7bc7937aa53c8c4e79970df4915b159238c635d
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 7 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Avatar.Aufbruch.nach.Pandora.2009.Telesync.German.XviD-2Brothers _mirror_.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Avatar.Aufbruch.nach.Pandora.2009.Telesync.German.XviD-2Brothers _mirror_.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4764-0-0x00007FFE0AC85000-0x00007FFE0AC86000-memory.dmp
memory/4764-1-0x00007FFE0A9D0000-0x00007FFE0B371000-memory.dmp
memory/4764-2-0x00007FFE0A9D0000-0x00007FFE0B371000-memory.dmp
memory/4764-3-0x00007FFE0A9D0000-0x00007FFE0B371000-memory.dmp
memory/4764-5-0x000000001C930000-0x000000001C9CC000-memory.dmp
memory/4764-4-0x000000001C3C0000-0x000000001C88E000-memory.dmp
memory/4764-7-0x00007FFE0A9D0000-0x00007FFE0B371000-memory.dmp
memory/4764-8-0x000000001CF80000-0x000000001D050000-memory.dmp
memory/4764-6-0x000000001CA40000-0x000000001CAA2000-memory.dmp
memory/4764-10-0x00007FFE0A9D0000-0x00007FFE0B371000-memory.dmp
memory/4764-11-0x00007FFE0A9D0000-0x00007FFE0B371000-memory.dmp
memory/4764-12-0x00007FFE0A9D0000-0x00007FFE0B371000-memory.dmp
memory/4764-13-0x00007FFE0A9D0000-0x00007FFE0B371000-memory.dmp
memory/4764-14-0x00007FFE0A9D0000-0x00007FFE0B371000-memory.dmp
memory/4764-15-0x00007FFE0A9D0000-0x00007FFE0B371000-memory.dmp
memory/4764-16-0x00007FFE0A9D0000-0x00007FFE0B371000-memory.dmp
memory/4764-17-0x00007FFE0A9D0000-0x00007FFE0B371000-memory.dmp
memory/4764-18-0x00000000018B0000-0x00000000018B8000-memory.dmp
memory/4764-19-0x00007FFE0A9D0000-0x00007FFE0B371000-memory.dmp
memory/4764-20-0x00007FFE0A9D0000-0x00007FFE0B371000-memory.dmp
memory/4764-21-0x00007FFE0A9D0000-0x00007FFE0B371000-memory.dmp
memory/4764-22-0x00007FFE0A9D0000-0x00007FFE0B371000-memory.dmp
memory/4764-23-0x00007FFE0A9D0000-0x00007FFE0B371000-memory.dmp
memory/4764-24-0x00007FFE0A9D0000-0x00007FFE0B371000-memory.dmp
memory/4764-25-0x00007FFE0A9D0000-0x00007FFE0B371000-memory.dmp
memory/4764-27-0x00007FFE0A9D0000-0x00007FFE0B371000-memory.dmp