Analysis

  • max time kernel
    149s
  • max time network
    149s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    10/09/2026, 02:57

General

  • Target
    jaffacakes118_Beim.ersten.Mal.2006.German.DL.PAL.HD2DVD.DVDR-Easy123.exe
  • Size 7.2MB
  • Sample260910-dfqe8sdp8s
  • SHA256 d21c3a3684d63a7ec7253da5da6fc63ea85c8b998e2b83f16c7caf2ebb5b9732
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 7 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Beim.ersten.Mal.2006.German.DL.PAL.HD2DVD.DVDR-Easy123.exe
    "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Beim.ersten.Mal.2006.German.DL.PAL.HD2DVD.DVDR-Easy123.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:696

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        memory/696-0-0x00007FFB133BA000-0x00007FFB133BB000-memory.dmp

        memory/696-1-0x00007FFB130C0000-0x00007FFB13AF8000-memory.dmp

        memory/696-2-0x000000001C260000-0x000000001C72E000-memory.dmp

        memory/696-3-0x000000001C7D0000-0x000000001C86C000-memory.dmp

        memory/696-4-0x000000001C8E0000-0x000000001C942000-memory.dmp

        memory/696-5-0x000000001CE20000-0x000000001CEF0000-memory.dmp

        memory/696-7-0x00007FFB130C0000-0x00007FFB13AF8000-memory.dmp

        memory/696-8-0x00007FFB130C0000-0x00007FFB13AF8000-memory.dmp

        memory/696-9-0x00007FFB130C0000-0x00007FFB13AF8000-memory.dmp

        memory/696-10-0x00007FFB130C0000-0x00007FFB13AF8000-memory.dmp

        memory/696-11-0x0000000001640000-0x0000000001648000-memory.dmp

        memory/696-12-0x00007FFB130C0000-0x00007FFB13AF8000-memory.dmp

        memory/696-13-0x00007FFB130C0000-0x00007FFB13AF8000-memory.dmp

        memory/696-14-0x00007FFB130C0000-0x00007FFB13AF8000-memory.dmp

        memory/696-15-0x00007FFB130C0000-0x00007FFB13AF8000-memory.dmp

        memory/696-16-0x00007FFB130C0000-0x00007FFB13AF8000-memory.dmp

        memory/696-17-0x00007FFB130C0000-0x00007FFB13AF8000-memory.dmp

        memory/696-18-0x00007FFB130C0000-0x00007FFB13AF8000-memory.dmp