Analysis
- max time kernel
148s - max time network
152s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
10/09/2026, 03:09
General
- Target jaffacakes118_Der Gluecksbaerchi Film German 1985 DVDRiP XViD.exe
- Size 5.9MB
- Sample260910-dnghasxwby
- SHA256 4e27bdadbecd87513edb011e123aec8ec62e1b533d45769a5b9ae4d746c2fafe
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 7 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Der Gluecksbaerchi Film German 1985 DVDRiP XViD.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Der Gluecksbaerchi Film German 1985 DVDRiP XViD.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2096-0-0x00007FF83EA9A000-0x00007FF83EA9B000-memory.dmp
memory/2096-1-0x00007FF83E7A0000-0x00007FF83F1D8000-memory.dmp
memory/2096-2-0x00007FF83E7A0000-0x00007FF83F1D8000-memory.dmp
memory/2096-3-0x00007FF83E7A0000-0x00007FF83F1D8000-memory.dmp
memory/2096-6-0x000000001C600000-0x000000001C69C000-memory.dmp
memory/2096-5-0x00007FF83E7A0000-0x00007FF83F1D8000-memory.dmp
memory/2096-4-0x000000001C090000-0x000000001C55E000-memory.dmp
memory/2096-7-0x000000001C710000-0x000000001C772000-memory.dmp
memory/2096-8-0x000000001CC50000-0x000000001CD20000-memory.dmp
memory/2096-10-0x00007FF83E7A0000-0x00007FF83F1D8000-memory.dmp
memory/2096-11-0x00007FF83E7A0000-0x00007FF83F1D8000-memory.dmp
memory/2096-12-0x00007FF83E7A0000-0x00007FF83F1D8000-memory.dmp
memory/2096-13-0x00007FF83E7A0000-0x00007FF83F1D8000-memory.dmp
memory/2096-14-0x00007FF83E7A0000-0x00007FF83F1D8000-memory.dmp
memory/2096-15-0x00007FF83E7A0000-0x00007FF83F1D8000-memory.dmp
memory/2096-16-0x00007FF83E7A0000-0x00007FF83F1D8000-memory.dmp
memory/2096-17-0x00007FF83E7A0000-0x00007FF83F1D8000-memory.dmp
memory/2096-19-0x00007FF83E7A0000-0x00007FF83F1D8000-memory.dmp
memory/2096-20-0x0000000001520000-0x0000000001528000-memory.dmp
memory/2096-21-0x00007FF83E7A0000-0x00007FF83F1D8000-memory.dmp
memory/2096-22-0x00007FF83E7A0000-0x00007FF83F1D8000-memory.dmp
memory/2096-18-0x00007FF83E7A0000-0x00007FF83F1D8000-memory.dmp
memory/2096-23-0x00007FF83E7A0000-0x00007FF83F1D8000-memory.dmp
memory/2096-24-0x00007FF83E7A0000-0x00007FF83F1D8000-memory.dmp