Analysis
- max time kernel
148s - max time network
127s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
10/09/2026, 03:42
General
- Target jaffacakes118_Der Herr der Ringe Trilogie SEE German DVDRiP DivX-GWL.exe
- Size 3.3MB
- Sample260910-d9f4nawekf
- SHA256 f4d9d3eaf8629412a11e87565f1fc48c0040bbadcd600a9cf1537267b05e72db
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 7 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Der Herr der Ringe Trilogie SEE German DVDRiP DivX-GWL.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Der Herr der Ringe Trilogie SEE German DVDRiP DivX-GWL.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/5732-0-0x00007FFFDF2DA000-0x00007FFFDF2DB000-memory.dmp
memory/5732-1-0x00007FFFDEFE0000-0x00007FFFDFA18000-memory.dmp
memory/5732-2-0x00007FFFDEFE0000-0x00007FFFDFA18000-memory.dmp
memory/5732-3-0x000000001C2E0000-0x000000001C7AE000-memory.dmp
memory/5732-7-0x000000001CEA0000-0x000000001CF70000-memory.dmp
memory/5732-6-0x00007FFFDEFE0000-0x00007FFFDFA18000-memory.dmp
memory/5732-5-0x000000001C960000-0x000000001C9C2000-memory.dmp
memory/5732-4-0x000000001C850000-0x000000001C8EC000-memory.dmp
memory/5732-9-0x00007FFFDEFE0000-0x00007FFFDFA18000-memory.dmp
memory/5732-10-0x00007FFFDEFE0000-0x00007FFFDFA18000-memory.dmp
memory/5732-11-0x00000000017E0000-0x00000000017E8000-memory.dmp
memory/5732-12-0x00007FFFDEFE0000-0x00007FFFDFA18000-memory.dmp
memory/5732-13-0x00007FFFDEFE0000-0x00007FFFDFA18000-memory.dmp
memory/5732-14-0x00007FFFDEFE0000-0x00007FFFDFA18000-memory.dmp
memory/5732-15-0x00007FFFDEFE0000-0x00007FFFDFA18000-memory.dmp
memory/5732-16-0x00007FFFDEFE0000-0x00007FFFDFA18000-memory.dmp
memory/5732-17-0x00007FFFDEFE0000-0x00007FFFDFA18000-memory.dmp
memory/5732-18-0x00007FFFDEFE0000-0x00007FFFDFA18000-memory.dmp
memory/5732-19-0x00007FFFDEFE0000-0x00007FFFDFA18000-memory.dmp
memory/5732-20-0x00007FFFDEFE0000-0x00007FFFDFA18000-memory.dmp
memory/5732-21-0x00007FFFDEFE0000-0x00007FFFDFA18000-memory.dmp