Analysis
- max time kernel
149s - max time network
148s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
- submitted
10/09/2026, 02:55
General
- Target jaffacakes118_Der.Fantastische.Mr.Fox.2009.German.AC3D.DL.1080p.x264-HDW.exe
- Size 7.2MB
- Sample260910-dej7tsvdqa
- SHA256 b8cce15d204c880cdea897f436b3601a5de6f00ce5b58a7ab906830174322d7f
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 5 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Der.Fantastische.Mr.Fox.2009.German.AC3D.DL.1080p.x264-HDW.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Der.Fantastische.Mr.Fox.2009.German.AC3D.DL.1080p.x264-HDW.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/824-0-0x00007FFE77485000-0x00007FFE77486000-memory.dmp
memory/824-1-0x00007FFE771D0000-0x00007FFE77B71000-memory.dmp
memory/824-2-0x00007FFE771D0000-0x00007FFE77B71000-memory.dmp
memory/824-4-0x00007FFE771D0000-0x00007FFE77B71000-memory.dmp
memory/824-5-0x000000001BFA0000-0x000000001C03C000-memory.dmp
memory/824-6-0x000000001C0B0000-0x000000001C112000-memory.dmp
memory/824-3-0x000000001BA30000-0x000000001BEFE000-memory.dmp
memory/824-7-0x000000001C5F0000-0x000000001C6C0000-memory.dmp
memory/824-9-0x00007FFE771D0000-0x00007FFE77B71000-memory.dmp
memory/824-10-0x0000000001030000-0x0000000001038000-memory.dmp
memory/824-11-0x00007FFE771D0000-0x00007FFE77B71000-memory.dmp
memory/824-12-0x00007FFE771D0000-0x00007FFE77B71000-memory.dmp
memory/824-13-0x00007FFE771D0000-0x00007FFE77B71000-memory.dmp
memory/824-14-0x00007FFE771D0000-0x00007FFE77B71000-memory.dmp
memory/824-15-0x00007FFE771D0000-0x00007FFE77B71000-memory.dmp
memory/824-16-0x00007FFE771D0000-0x00007FFE77B71000-memory.dmp
memory/824-17-0x00007FFE771D0000-0x00007FFE77B71000-memory.dmp
memory/824-18-0x00007FFE771D0000-0x00007FFE77B71000-memory.dmp
memory/824-19-0x00007FFE771D0000-0x00007FFE77B71000-memory.dmp
memory/824-21-0x00007FFE771D0000-0x00007FFE77B71000-memory.dmp