Analysis
- max time kernel
148s - max time network
130s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
10/09/2026, 03:41
General
- Target jaffacakes118_Badesalz.Dugi.Otok.German.2009.AC3.DVDRiP.XViD-WOMBAT.exe
- Size 3.6MB
- Sample260910-d83w2aep5v
- SHA256 50673f72ffee40da1ad483a74c8981a43391a55b6933b302ff22b64d6f66fe78
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 9 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Badesalz.Dugi.Otok.German.2009.AC3.DVDRiP.XViD-WOMBAT.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Badesalz.Dugi.Otok.German.2009.AC3.DVDRiP.XViD-WOMBAT.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/5904-0-0x00007FFDEF9AA000-0x00007FFDEF9AB000-memory.dmp
memory/5904-1-0x00007FFDEF6B0000-0x00007FFDF00E8000-memory.dmp
memory/5904-2-0x000000001C4D0000-0x000000001C99E000-memory.dmp
memory/5904-4-0x00007FFDEF6B0000-0x00007FFDF00E8000-memory.dmp
memory/5904-6-0x000000001D090000-0x000000001D160000-memory.dmp
memory/5904-5-0x000000001CB50000-0x000000001CBB2000-memory.dmp
memory/5904-3-0x000000001CA40000-0x000000001CADC000-memory.dmp
memory/5904-8-0x00007FFDEF6B0000-0x00007FFDF00E8000-memory.dmp
memory/5904-9-0x00007FFDEF6B0000-0x00007FFDF00E8000-memory.dmp
memory/5904-10-0x00007FFDEF6B0000-0x00007FFDF00E8000-memory.dmp
memory/5904-11-0x00007FFDEF6B0000-0x00007FFDF00E8000-memory.dmp
memory/5904-12-0x0000000003380000-0x0000000003388000-memory.dmp
memory/5904-13-0x00007FFDEF6B0000-0x00007FFDF00E8000-memory.dmp
memory/5904-14-0x00007FFDEF6B0000-0x00007FFDF00E8000-memory.dmp
memory/5904-15-0x00007FFDEF6B0000-0x00007FFDF00E8000-memory.dmp
memory/5904-16-0x00007FFDEF6B0000-0x00007FFDF00E8000-memory.dmp
memory/5904-17-0x00007FFDEF6B0000-0x00007FFDF00E8000-memory.dmp
memory/5904-18-0x00007FFDEF6B0000-0x00007FFDF00E8000-memory.dmp
memory/5904-19-0x00007FFDEF6B0000-0x00007FFDF00E8000-memory.dmp
memory/5904-20-0x00007FFDEF6B0000-0x00007FFDF00E8000-memory.dmp