Analysis
- max time kernel
150s - max time network
150s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
- submitted
10/09/2026, 02:49
General
- Target jaffacakes118_Avatar.TS.XviD-IMAGiNE.exe
- Size 7.6MB
- Sample260910-da2ajsvcmc
- SHA256 0c6e199264a920b4964587b3bddf910c7be7db522ed1d7232752ea39f219c717
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 9 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Avatar.TS.XviD-IMAGiNE.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Avatar.TS.XviD-IMAGiNE.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/5040-0-0x00007FF984AE5000-0x00007FF984AE6000-memory.dmp
memory/5040-1-0x00007FF984830000-0x00007FF9851D1000-memory.dmp
memory/5040-2-0x00007FF984830000-0x00007FF9851D1000-memory.dmp
memory/5040-4-0x00007FF984830000-0x00007FF9851D1000-memory.dmp
memory/5040-3-0x000000001BC60000-0x000000001C12E000-memory.dmp
memory/5040-6-0x000000001C1D0000-0x000000001C26C000-memory.dmp
memory/5040-7-0x000000001C2E0000-0x000000001C342000-memory.dmp
memory/5040-5-0x00007FF984830000-0x00007FF9851D1000-memory.dmp
memory/5040-8-0x000000001C820000-0x000000001C8F0000-memory.dmp
memory/5040-10-0x00000000012F0000-0x00000000012F8000-memory.dmp
memory/5040-11-0x00007FF984830000-0x00007FF9851D1000-memory.dmp
memory/5040-12-0x00007FF984830000-0x00007FF9851D1000-memory.dmp
memory/5040-13-0x00007FF984830000-0x00007FF9851D1000-memory.dmp
memory/5040-14-0x00007FF984830000-0x00007FF9851D1000-memory.dmp
memory/5040-15-0x00007FF984830000-0x00007FF9851D1000-memory.dmp
memory/5040-16-0x00007FF984830000-0x00007FF9851D1000-memory.dmp
memory/5040-17-0x00007FF984830000-0x00007FF9851D1000-memory.dmp
memory/5040-19-0x00007FF984830000-0x00007FF9851D1000-memory.dmp