Analysis
- max time kernel
149s - max time network
135s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
10/09/2026, 03:15
General
- Target jaffacakes118_Tim und Struppi Collection 2 (4 v 4 DVDs).exe
- Size 6.9MB
- Sample260910-drykzsvgrf
- SHA256 9afffc11e4b9609b7a5b411a2e2683a9e2f7f22e59867fb9870cfbb6b6b07858
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 9 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Tim und Struppi Collection 2 (4 v 4 DVDs).exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Tim und Struppi Collection 2 (4 v 4 DVDs).exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1284-0-0x00007FFE4F35A000-0x00007FFE4F35B000-memory.dmp
memory/1284-1-0x00007FFE4F060000-0x00007FFE4FA98000-memory.dmp
memory/1284-2-0x000000001B8C0000-0x000000001BD8E000-memory.dmp
memory/1284-4-0x000000001BF40000-0x000000001BFA2000-memory.dmp
memory/1284-3-0x000000001BE30000-0x000000001BECC000-memory.dmp
memory/1284-5-0x000000001C480000-0x000000001C550000-memory.dmp
memory/1284-7-0x00007FFE4F060000-0x00007FFE4FA98000-memory.dmp
memory/1284-8-0x00007FFE4F060000-0x00007FFE4FA98000-memory.dmp
memory/1284-9-0x00007FFE4F060000-0x00007FFE4FA98000-memory.dmp
memory/1284-10-0x0000000000DB0000-0x0000000000DB8000-memory.dmp
memory/1284-11-0x00007FFE4F060000-0x00007FFE4FA98000-memory.dmp
memory/1284-12-0x00007FFE4F060000-0x00007FFE4FA98000-memory.dmp
memory/1284-13-0x00007FFE4F060000-0x00007FFE4FA98000-memory.dmp
memory/1284-14-0x00007FFE4F060000-0x00007FFE4FA98000-memory.dmp
memory/1284-15-0x00007FFE4F060000-0x00007FFE4FA98000-memory.dmp
memory/1284-16-0x00007FFE4F060000-0x00007FFE4FA98000-memory.dmp
memory/1284-17-0x00007FFE4F060000-0x00007FFE4FA98000-memory.dmp
memory/1284-18-0x00007FFE4F060000-0x00007FFE4FA98000-memory.dmp
memory/1284-19-0x00007FFE4F060000-0x00007FFE4FA98000-memory.dmp