Analysis
- max time kernel
149s - max time network
132s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
10/09/2026, 04:32
General
- Target jaffacakes118_Der.Extremtester.S01E06.Wie.ueberlebe.ich.in.der.Wildnis.GERMAN.DOKU.WS.dTV.XviD-GEO.exe
- Size 2.5MB
- Sample260910-e56desfr6y
- SHA256 04f424a5852d1cc759f65dc3cfea0db2ed41142d4da59417db16c38008c0e2d1
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 7 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Der.Extremtester.S01E06.Wie.ueberlebe.ich.in.der.Wildnis.GERMAN.DOKU.WS.dTV.XviD-GEO.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Der.Extremtester.S01E06.Wie.ueberlebe.ich.in.der.Wildnis.GERMAN.DOKU.WS.dTV.XviD-GEO.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1272-0-0x00007FFE8990A000-0x00007FFE8990B000-memory.dmp
memory/1272-1-0x00007FFE89610000-0x00007FFE8A048000-memory.dmp
memory/1272-2-0x000000001C210000-0x000000001C6DE000-memory.dmp
memory/1272-3-0x000000001C780000-0x000000001C81C000-memory.dmp
memory/1272-4-0x000000001C890000-0x000000001C8F2000-memory.dmp
memory/1272-5-0x000000001CDD0000-0x000000001CEA0000-memory.dmp
memory/1272-7-0x00007FFE89610000-0x00007FFE8A048000-memory.dmp
memory/1272-8-0x00007FFE89610000-0x00007FFE8A048000-memory.dmp
memory/1272-10-0x00007FFE89610000-0x00007FFE8A048000-memory.dmp
memory/1272-9-0x00000000016F0000-0x00000000016F8000-memory.dmp
memory/1272-11-0x00007FFE89610000-0x00007FFE8A048000-memory.dmp
memory/1272-12-0x00007FFE89610000-0x00007FFE8A048000-memory.dmp
memory/1272-13-0x00007FFE89610000-0x00007FFE8A048000-memory.dmp
memory/1272-14-0x00007FFE89610000-0x00007FFE8A048000-memory.dmp
memory/1272-15-0x00007FFE89610000-0x00007FFE8A048000-memory.dmp
memory/1272-16-0x00007FFE89610000-0x00007FFE8A048000-memory.dmp
memory/1272-17-0x00007FFE89610000-0x00007FFE8A048000-memory.dmp