Analysis
- max time kernel
148s - max time network
153s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
10/09/2026, 04:34
General
- Target jaffacakes118_AppDev.ASP.NET.Using.Visual.C.Sharp.2008.Volume.2.DVD-iNKiSO.exe
- Size 7.8MB
- Sample260910-e65hhsfe24
- SHA256 bece2065849e150aece0c8e0299a38014953561a0e1a673ba34c282159a7c3a7
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 7 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_AppDev.ASP.NET.Using.Visual.C.Sharp.2008.Volume.2.DVD-iNKiSO.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_AppDev.ASP.NET.Using.Visual.C.Sharp.2008.Volume.2.DVD-iNKiSO.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/6048-0-0x00007FF98DE5A000-0x00007FF98DE5B000-memory.dmp
memory/6048-1-0x00007FF98DB60000-0x00007FF98E598000-memory.dmp
memory/6048-2-0x000000001C330000-0x000000001C7FE000-memory.dmp
memory/6048-5-0x00007FF98DB60000-0x00007FF98E598000-memory.dmp
memory/6048-4-0x000000001C9B0000-0x000000001CA12000-memory.dmp
memory/6048-6-0x000000001CEF0000-0x000000001CFC0000-memory.dmp
memory/6048-3-0x000000001C8A0000-0x000000001C93C000-memory.dmp
memory/6048-8-0x00007FF98DB60000-0x00007FF98E598000-memory.dmp
memory/6048-9-0x00007FF98DB60000-0x00007FF98E598000-memory.dmp
memory/6048-10-0x00007FF98DB60000-0x00007FF98E598000-memory.dmp
memory/6048-11-0x0000000001700000-0x0000000001708000-memory.dmp
memory/6048-12-0x00007FF98DB60000-0x00007FF98E598000-memory.dmp
memory/6048-13-0x00007FF98DB60000-0x00007FF98E598000-memory.dmp
memory/6048-14-0x00007FF98DB60000-0x00007FF98E598000-memory.dmp
memory/6048-15-0x00007FF98DB60000-0x00007FF98E598000-memory.dmp
memory/6048-16-0x00007FF98DB60000-0x00007FF98E598000-memory.dmp
memory/6048-17-0x00007FF98DB60000-0x00007FF98E598000-memory.dmp
memory/6048-18-0x00007FF98DB60000-0x00007FF98E598000-memory.dmp
memory/6048-19-0x00007FF98DB60000-0x00007FF98E598000-memory.dmp
memory/6048-20-0x00007FF98DB60000-0x00007FF98E598000-memory.dmp
memory/6048-21-0x00007FF98DB60000-0x00007FF98E598000-memory.dmp