Analysis
- max time kernel
150s - max time network
139s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
- submitted
10/09/2026, 02:58
General
- Target jaffacakes118_Despereaux.Der.kleine.Maeuseheld.German.2008.ML.PAL.DVDR-KiNOWELT _mirror_.exe
- Size 7.0MB
- Sample260910-df56padp9x
- SHA256 20b1f94c0f21f2fec245d0d8efa53908c34b44cb1f1bcb92d2adb484ee56305f
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 9 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Despereaux.Der.kleine.Maeuseheld.German.2008.ML.PAL.DVDR-KiNOWELT _mirror_.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Despereaux.Der.kleine.Maeuseheld.German.2008.ML.PAL.DVDR-KiNOWELT _mirror_.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1284-0-0x00007FF9DD7A5000-0x00007FF9DD7A6000-memory.dmp
memory/1284-1-0x00007FF9DD4F0000-0x00007FF9DDE91000-memory.dmp
memory/1284-2-0x00007FF9DD4F0000-0x00007FF9DDE91000-memory.dmp
memory/1284-3-0x000000001BBE0000-0x000000001C0AE000-memory.dmp
memory/1284-4-0x000000001C150000-0x000000001C1EC000-memory.dmp
memory/1284-5-0x000000001C260000-0x000000001C2C2000-memory.dmp
memory/1284-6-0x000000001C7A0000-0x000000001C870000-memory.dmp
memory/1284-8-0x00007FF9DD4F0000-0x00007FF9DDE91000-memory.dmp
memory/1284-9-0x00007FF9DD4F0000-0x00007FF9DDE91000-memory.dmp
memory/1284-10-0x00007FF9DD4F0000-0x00007FF9DDE91000-memory.dmp
memory/1284-11-0x00007FF9DD4F0000-0x00007FF9DDE91000-memory.dmp
memory/1284-12-0x00007FF9DD4F0000-0x00007FF9DDE91000-memory.dmp
memory/1284-13-0x00007FF9DD4F0000-0x00007FF9DDE91000-memory.dmp
memory/1284-14-0x00007FF9DD4F0000-0x00007FF9DDE91000-memory.dmp
memory/1284-15-0x00007FF9DD4F0000-0x00007FF9DDE91000-memory.dmp
memory/1284-17-0x000000001B5B0000-0x000000001B5B8000-memory.dmp
memory/1284-16-0x00007FF9DD4F0000-0x00007FF9DDE91000-memory.dmp
memory/1284-18-0x00007FF9DD4F0000-0x00007FF9DDE91000-memory.dmp
memory/1284-20-0x00007FF9DD4F0000-0x00007FF9DDE91000-memory.dmp
memory/1284-19-0x00007FF9DD4F0000-0x00007FF9DDE91000-memory.dmp
memory/1284-21-0x00007FF9DD4F0000-0x00007FF9DDE91000-memory.dmp
memory/1284-22-0x00007FF9DD4F0000-0x00007FF9DDE91000-memory.dmp
memory/1284-23-0x00007FF9DD4F0000-0x00007FF9DDE91000-memory.dmp
memory/1284-24-0x00007FF9DD4F0000-0x00007FF9DDE91000-memory.dmp
memory/1284-26-0x00007FF9DD4F0000-0x00007FF9DDE91000-memory.dmp