Analysis
- max time kernel
150s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
10/09/2026, 03:34
General
- Target jaffacakes118_Ice.Age.3.Die.Dinosaurier.sind.los.German.DVDRip.XviD-CRUCiAL.exe
- Size 5.6MB
- Sample260910-d4ryzaen2s
- SHA256 ef831731bf341b5837d7c55707c76718e87d7403ecb88ea08def09457e2f3d2e
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 7 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Ice.Age.3.Die.Dinosaurier.sind.los.German.DVDRip.XviD-CRUCiAL.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Ice.Age.3.Die.Dinosaurier.sind.los.German.DVDRip.XviD-CRUCiAL.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4624-0-0x00007FF98A01A000-0x00007FF98A01B000-memory.dmp
memory/4624-1-0x00007FF989D20000-0x00007FF98A758000-memory.dmp
memory/4624-2-0x000000001C340000-0x000000001C80E000-memory.dmp
memory/4624-4-0x000000001C9C0000-0x000000001CA22000-memory.dmp
memory/4624-3-0x000000001C8B0000-0x000000001C94C000-memory.dmp
memory/4624-5-0x000000001CF00000-0x000000001CFD0000-memory.dmp
memory/4624-7-0x00007FF989D20000-0x00007FF98A758000-memory.dmp
memory/4624-8-0x00007FF989D20000-0x00007FF98A758000-memory.dmp
memory/4624-9-0x00007FF989D20000-0x00007FF98A758000-memory.dmp
memory/4624-10-0x00007FF989D20000-0x00007FF98A758000-memory.dmp
memory/4624-11-0x0000000001730000-0x0000000001738000-memory.dmp
memory/4624-12-0x00007FF989D20000-0x00007FF98A758000-memory.dmp
memory/4624-13-0x00007FF989D20000-0x00007FF98A758000-memory.dmp
memory/4624-14-0x00007FF989D20000-0x00007FF98A758000-memory.dmp
memory/4624-15-0x00007FF989D20000-0x00007FF98A758000-memory.dmp
memory/4624-16-0x00007FF989D20000-0x00007FF98A758000-memory.dmp
memory/4624-17-0x00007FF989D20000-0x00007FF98A758000-memory.dmp
memory/4624-18-0x00007FF989D20000-0x00007FF98A758000-memory.dmp
memory/4624-19-0x00007FF989D20000-0x00007FF98A758000-memory.dmp
memory/4624-20-0x00007FF989D20000-0x00007FF98A758000-memory.dmp