Analysis
- max time kernel
150s - max time network
152s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
10/09/2026, 03:40
General
- Target jaffacakes118_Der.Herr.der.Ringe.Die.zwei.Tuerme.Special.Extended.Edition.2002.German.AC3D.720p.HDTV.x264-CDD.exe
- Size 873KB
- Sample260910-d8frhawdrh
- SHA256 9952ca9e085afa792ff6904748b1e5dfdc18000ebb6f9b867b0a200a2eec8d05
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 7 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Der.Herr.der.Ringe.Die.zwei.Tuerme.Special.Extended.Edition.2002.German.AC3D.720p.HDTV.x264-CDD.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Der.Herr.der.Ringe.Die.zwei.Tuerme.Special.Extended.Edition.2002.German.AC3D.720p.HDTV.x264-CDD.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/5760-0-0x00007FFF95A3A000-0x00007FFF95A3B000-memory.dmp
memory/5760-1-0x00007FFF95740000-0x00007FFF96178000-memory.dmp
memory/5760-2-0x00007FFF95740000-0x00007FFF96178000-memory.dmp
memory/5760-3-0x000000001B560000-0x000000001BA2E000-memory.dmp
memory/5760-5-0x000000001BBE0000-0x000000001BC42000-memory.dmp
memory/5760-4-0x000000001BAD0000-0x000000001BB6C000-memory.dmp
memory/5760-6-0x000000001C120000-0x000000001C1F0000-memory.dmp
memory/5760-8-0x00007FFF95740000-0x00007FFF96178000-memory.dmp
memory/5760-9-0x00007FFF95740000-0x00007FFF96178000-memory.dmp
memory/5760-10-0x00007FFF95740000-0x00007FFF96178000-memory.dmp
memory/5760-11-0x00007FFF95740000-0x00007FFF96178000-memory.dmp
memory/5760-12-0x00007FFF95740000-0x00007FFF96178000-memory.dmp
memory/5760-13-0x00007FFF95740000-0x00007FFF96178000-memory.dmp
memory/5760-14-0x0000000000A40000-0x0000000000A48000-memory.dmp
memory/5760-15-0x00007FFF95740000-0x00007FFF96178000-memory.dmp
memory/5760-16-0x00007FFF95740000-0x00007FFF96178000-memory.dmp
memory/5760-17-0x00007FFF95740000-0x00007FFF96178000-memory.dmp
memory/5760-18-0x00007FFF95740000-0x00007FFF96178000-memory.dmp
memory/5760-19-0x00007FFF95740000-0x00007FFF96178000-memory.dmp
memory/5760-20-0x00007FFF95740000-0x00007FFF96178000-memory.dmp
memory/5760-21-0x00007FFF95740000-0x00007FFF96178000-memory.dmp
memory/5760-22-0x00007FFF95740000-0x00007FFF96178000-memory.dmp
memory/5760-23-0x00007FFF95740000-0x00007FFF96178000-memory.dmp
memory/5760-24-0x00007FFF95740000-0x00007FFF96178000-memory.dmp