Analysis
- max time kernel
149s - max time network
150s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
- submitted
10/09/2026, 02:53
General
- Target jaffacakes118_Der.Herr.der.Ringe.Die.Gefaehrten.German.2001.720p.BluRay.x264-DEFUSED _mirror_.exe
- Size 10.8MB
- Sample260910-dda8jaeh27
- SHA256 28cffc8a5c2c8edd32d6927c756f43eebf89d46329810d3c0146fb5ef7184528
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 7 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Der.Herr.der.Ringe.Die.Gefaehrten.German.2001.720p.BluRay.x264-DEFUSED _mirror_.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Der.Herr.der.Ringe.Die.Gefaehrten.German.2001.720p.BluRay.x264-DEFUSED _mirror_.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1384-0-0x00007FFECDAB5000-0x00007FFECDAB6000-memory.dmp
memory/1384-1-0x00007FFECD800000-0x00007FFECE1A1000-memory.dmp
memory/1384-2-0x00007FFECD800000-0x00007FFECE1A1000-memory.dmp
memory/1384-3-0x000000001C000000-0x000000001C4CE000-memory.dmp
memory/1384-5-0x000000001C680000-0x000000001C6E2000-memory.dmp
memory/1384-4-0x000000001C570000-0x000000001C60C000-memory.dmp
memory/1384-6-0x000000001CBC0000-0x000000001CC90000-memory.dmp
memory/1384-8-0x00007FFECD800000-0x00007FFECE1A1000-memory.dmp
memory/1384-9-0x00007FFECD800000-0x00007FFECE1A1000-memory.dmp
memory/1384-10-0x00007FFECD800000-0x00007FFECE1A1000-memory.dmp
memory/1384-11-0x00007FFECD800000-0x00007FFECE1A1000-memory.dmp
memory/1384-12-0x00000000012D0000-0x00000000012D8000-memory.dmp
memory/1384-13-0x00007FFECD800000-0x00007FFECE1A1000-memory.dmp
memory/1384-14-0x00007FFECD800000-0x00007FFECE1A1000-memory.dmp
memory/1384-15-0x00007FFECD800000-0x00007FFECE1A1000-memory.dmp
memory/1384-16-0x00007FFECD800000-0x00007FFECE1A1000-memory.dmp
memory/1384-17-0x00007FFECD800000-0x00007FFECE1A1000-memory.dmp
memory/1384-18-0x00007FFECD800000-0x00007FFECE1A1000-memory.dmp
memory/1384-19-0x00007FFECD800000-0x00007FFECE1A1000-memory.dmp
memory/1384-20-0x00007FFECD800000-0x00007FFECE1A1000-memory.dmp
memory/1384-22-0x00007FFECD800000-0x00007FFECE1A1000-memory.dmp