Analysis

  • max time kernel
    149s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    10/09/2026, 04:33

General

  • Target
    jaffacakes118_Der dunkle Kristall DVDRip XviD AC3 (by me).exe
  • Size 4.8MB
  • Sample260910-e6ypzafr8s
  • SHA256 15ab766d47bc861c0ad7a6f10554dedbb6f938a0af9438a3c4286a91db03da69
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 7 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Der dunkle Kristall DVDRip XviD AC3 (by me).exe
    "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Der dunkle Kristall DVDRip XviD AC3 (by me).exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:3816

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        memory/3816-0-0x00007FF865355000-0x00007FF865356000-memory.dmp

        memory/3816-1-0x00007FF8650A0000-0x00007FF865A41000-memory.dmp

        memory/3816-2-0x00007FF8650A0000-0x00007FF865A41000-memory.dmp

        memory/3816-3-0x000000001BE50000-0x000000001C31E000-memory.dmp

        memory/3816-4-0x000000001C3C0000-0x000000001C45C000-memory.dmp

        memory/3816-5-0x000000001C4D0000-0x000000001C532000-memory.dmp

        memory/3816-6-0x000000001CA10000-0x000000001CAE0000-memory.dmp

        memory/3816-8-0x00007FF8650A0000-0x00007FF865A41000-memory.dmp

        memory/3816-9-0x00007FF8650A0000-0x00007FF865A41000-memory.dmp

        memory/3816-10-0x00007FF8650A0000-0x00007FF865A41000-memory.dmp

        memory/3816-11-0x00007FF8650A0000-0x00007FF865A41000-memory.dmp

        memory/3816-12-0x0000000001150000-0x0000000001158000-memory.dmp

        memory/3816-13-0x00007FF8650A0000-0x00007FF865A41000-memory.dmp

        memory/3816-14-0x00007FF8650A0000-0x00007FF865A41000-memory.dmp

        memory/3816-15-0x00007FF8650A0000-0x00007FF865A41000-memory.dmp

        memory/3816-16-0x00007FF8650A0000-0x00007FF865A41000-memory.dmp

        memory/3816-17-0x00007FF8650A0000-0x00007FF865A41000-memory.dmp

        memory/3816-19-0x00007FF8650A0000-0x00007FF865A41000-memory.dmp