Analysis

  • max time kernel
    149s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260710-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    10/09/2026, 02:48

General

  • Target
    jaffacakes118_The.Pirates.of.Langkasuka.German.2008.AC3.DVDRiP.XviD-XF _mirror_.exe
  • Size 4.3MB
  • Sample260910-dayveseg96
  • SHA256 348de3b1e968d2351e8b1c920ec56b7be3f8c86138a6a05e50cb0ed6fa6a6031
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 9 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\jaffacakes118_The.Pirates.of.Langkasuka.German.2008.AC3.DVDRiP.XviD-XF _mirror_.exe
    "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_The.Pirates.of.Langkasuka.German.2008.AC3.DVDRiP.XviD-XF _mirror_.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:2612

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        memory/2612-0-0x00007FFAD21EA000-0x00007FFAD21EB000-memory.dmp

        memory/2612-2-0x000000001BFF0000-0x000000001C4BE000-memory.dmp

        memory/2612-4-0x000000001C670000-0x000000001C6D2000-memory.dmp

        memory/2612-3-0x000000001C560000-0x000000001C5FC000-memory.dmp

        memory/2612-1-0x00007FFAD1EF0000-0x00007FFAD2928000-memory.dmp

        memory/2612-5-0x000000001CBB0000-0x000000001CC80000-memory.dmp

        memory/2612-7-0x00007FFAD1EF0000-0x00007FFAD2928000-memory.dmp

        memory/2612-8-0x00007FFAD1EF0000-0x00007FFAD2928000-memory.dmp

        memory/2612-10-0x00000000013D0000-0x00000000013D8000-memory.dmp

        memory/2612-9-0x00007FFAD1EF0000-0x00007FFAD2928000-memory.dmp

        memory/2612-11-0x00007FFAD1EF0000-0x00007FFAD2928000-memory.dmp

        memory/2612-12-0x00007FFAD1EF0000-0x00007FFAD2928000-memory.dmp

        memory/2612-13-0x00007FFAD1EF0000-0x00007FFAD2928000-memory.dmp

        memory/2612-14-0x00007FFAD1EF0000-0x00007FFAD2928000-memory.dmp

        memory/2612-15-0x00007FFAD1EF0000-0x00007FFAD2928000-memory.dmp