Analysis
- max time kernel
149s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
10/09/2026, 03:15
General
- Target jaffacakes118_Der.Herr.der.Ringe.2.Die.zwei.Tuerme.German.2002.720p.BluRay.x264-DEFUSED _mirror_.exe
- Size 1.2MB
- Sample260910-dr99saej7x
- SHA256 8f9eedee06a80fe4d2fa901d88dff5a76cb501c4e218f1d1ec488d5be7546400
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 7 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Der.Herr.der.Ringe.2.Die.zwei.Tuerme.German.2002.720p.BluRay.x264-DEFUSED _mirror_.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Der.Herr.der.Ringe.2.Die.zwei.Tuerme.German.2002.720p.BluRay.x264-DEFUSED _mirror_.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3116-0-0x00007FFA7AB7A000-0x00007FFA7AB7B000-memory.dmp
memory/3116-1-0x00007FFA7A880000-0x00007FFA7B2B8000-memory.dmp
memory/3116-2-0x00007FFA7A880000-0x00007FFA7B2B8000-memory.dmp
memory/3116-3-0x000000001C050000-0x000000001C51E000-memory.dmp
memory/3116-4-0x00007FFA7A880000-0x00007FFA7B2B8000-memory.dmp
memory/3116-6-0x000000001C6D0000-0x000000001C732000-memory.dmp
memory/3116-5-0x000000001C5C0000-0x000000001C65C000-memory.dmp
memory/3116-7-0x000000001CC10000-0x000000001CCE0000-memory.dmp
memory/3116-9-0x00007FFA7A880000-0x00007FFA7B2B8000-memory.dmp
memory/3116-10-0x00007FFA7A880000-0x00007FFA7B2B8000-memory.dmp
memory/3116-11-0x00007FFA7A880000-0x00007FFA7B2B8000-memory.dmp
memory/3116-12-0x00007FFA7A880000-0x00007FFA7B2B8000-memory.dmp
memory/3116-13-0x00007FFA7A880000-0x00007FFA7B2B8000-memory.dmp
memory/3116-16-0x00007FFA7A880000-0x00007FFA7B2B8000-memory.dmp
memory/3116-15-0x0000000001540000-0x0000000001548000-memory.dmp
memory/3116-17-0x00007FFA7A880000-0x00007FFA7B2B8000-memory.dmp
memory/3116-14-0x00007FFA7A880000-0x00007FFA7B2B8000-memory.dmp
memory/3116-18-0x00007FFA7A880000-0x00007FFA7B2B8000-memory.dmp
memory/3116-19-0x00007FFA7A880000-0x00007FFA7B2B8000-memory.dmp
memory/3116-20-0x00007FFA7A880000-0x00007FFA7B2B8000-memory.dmp
memory/3116-21-0x00007FFA7A880000-0x00007FFA7B2B8000-memory.dmp
memory/3116-22-0x00007FFA7A880000-0x00007FFA7B2B8000-memory.dmp