Analysis
- max time kernel
148s - max time network
133s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
10/09/2026, 03:37
General
- Target jaffacakes118_Barbie.und.das.Diamantschloss.German.2008.DVDRiP.XViD-DOLLHEAD.exe
- Size 1.3MB
- Sample260910-d6s9taen7x
- SHA256 ad7887679ef8def6845678002ebb8594d657a4bc144aee3977d7258b0ed1aa42
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 7 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Barbie.und.das.Diamantschloss.German.2008.DVDRiP.XViD-DOLLHEAD.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Barbie.und.das.Diamantschloss.German.2008.DVDRiP.XViD-DOLLHEAD.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/832-0-0x00007FF9CA49A000-0x00007FF9CA49B000-memory.dmp
memory/832-1-0x00007FF9CA1A0000-0x00007FF9CABD8000-memory.dmp
memory/832-2-0x000000001C120000-0x000000001C5EE000-memory.dmp
memory/832-4-0x000000001C7A0000-0x000000001C802000-memory.dmp
memory/832-5-0x00007FF9CA1A0000-0x00007FF9CABD8000-memory.dmp
memory/832-3-0x000000001C690000-0x000000001C72C000-memory.dmp
memory/832-6-0x000000001CCE0000-0x000000001CDB0000-memory.dmp
memory/832-8-0x00007FF9CA1A0000-0x00007FF9CABD8000-memory.dmp
memory/832-9-0x00007FF9CA1A0000-0x00007FF9CABD8000-memory.dmp
memory/832-10-0x00007FF9CA1A0000-0x00007FF9CABD8000-memory.dmp
memory/832-11-0x0000000001400000-0x0000000001408000-memory.dmp
memory/832-12-0x00007FF9CA1A0000-0x00007FF9CABD8000-memory.dmp
memory/832-13-0x00007FF9CA1A0000-0x00007FF9CABD8000-memory.dmp
memory/832-14-0x00007FF9CA1A0000-0x00007FF9CABD8000-memory.dmp
memory/832-15-0x00007FF9CA1A0000-0x00007FF9CABD8000-memory.dmp
memory/832-16-0x00007FF9CA1A0000-0x00007FF9CABD8000-memory.dmp
memory/832-17-0x00007FF9CA1A0000-0x00007FF9CABD8000-memory.dmp