Analysis
- max time kernel
150s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
10/09/2026, 03:08
General
- Target jaffacakes118_Big.Science.Erdbeben.von.New.York.German.Doku.WS.dTV.XViD-FiXTv.exe
- Size 7.3MB
- Sample260910-dm1jsadr4x
- SHA256 6fbda453b9bbcb9a7190c736bd0f6292cce65e73dd5ac599d0bd02ec8075addd
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 7 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Big.Science.Erdbeben.von.New.York.German.Doku.WS.dTV.XViD-FiXTv.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Big.Science.Erdbeben.von.New.York.German.Doku.WS.dTV.XViD-FiXTv.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1060-0-0x00007FF8E351A000-0x00007FF8E351B000-memory.dmp
memory/1060-1-0x00007FF8E3220000-0x00007FF8E3C58000-memory.dmp
memory/1060-3-0x000000001BB10000-0x000000001BBAC000-memory.dmp
memory/1060-2-0x000000001B5A0000-0x000000001BA6E000-memory.dmp
memory/1060-5-0x000000001BC20000-0x000000001BC82000-memory.dmp
memory/1060-4-0x00007FF8E3220000-0x00007FF8E3C58000-memory.dmp
memory/1060-6-0x000000001C160000-0x000000001C230000-memory.dmp
memory/1060-8-0x00007FF8E3220000-0x00007FF8E3C58000-memory.dmp
memory/1060-10-0x0000000000BA0000-0x0000000000BA8000-memory.dmp
memory/1060-9-0x00007FF8E3220000-0x00007FF8E3C58000-memory.dmp
memory/1060-11-0x00007FF8E3220000-0x00007FF8E3C58000-memory.dmp
memory/1060-12-0x00007FF8E3220000-0x00007FF8E3C58000-memory.dmp
memory/1060-13-0x00007FF8E3220000-0x00007FF8E3C58000-memory.dmp
memory/1060-14-0x00007FF8E3220000-0x00007FF8E3C58000-memory.dmp
memory/1060-15-0x00007FF8E3220000-0x00007FF8E3C58000-memory.dmp
memory/1060-16-0x00007FF8E3220000-0x00007FF8E3C58000-memory.dmp
memory/1060-17-0x00007FF8E3220000-0x00007FF8E3C58000-memory.dmp
memory/1060-18-0x00007FF8E3220000-0x00007FF8E3C58000-memory.dmp
memory/1060-19-0x00007FF8E3220000-0x00007FF8E3C58000-memory.dmp
memory/1060-20-0x00007FF8E3220000-0x00007FF8E3C58000-memory.dmp