Analysis
- max time kernel
150s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260710-en - resource tags
- submitted
10/09/2026, 04:37
General
- Target jaffacakes118_Away.We.Go.Auf.nach.Irgendwo.German.2009.DL.PAL.DVDR-KiNOWELT.exe
- Size 1.9MB
- Sample260910-e81x4sxhla
- SHA256 b4ad61fe01063b1914897a87d60ac291ae56af5a866434535bdbaee5e0dfae17
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 7 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Away.We.Go.Auf.nach.Irgendwo.German.2009.DL.PAL.DVDR-KiNOWELT.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Away.We.Go.Auf.nach.Irgendwo.German.2009.DL.PAL.DVDR-KiNOWELT.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2684-0-0x00007FFB4677A000-0x00007FFB4677B000-memory.dmp
memory/2684-1-0x00007FFB46480000-0x00007FFB46EB8000-memory.dmp
memory/2684-2-0x000000001BE00000-0x000000001C2CE000-memory.dmp
memory/2684-3-0x000000001C370000-0x000000001C40C000-memory.dmp
memory/2684-4-0x000000001C480000-0x000000001C4E2000-memory.dmp
memory/2684-5-0x000000001C9C0000-0x000000001CA90000-memory.dmp
memory/2684-7-0x00007FFB46480000-0x00007FFB46EB8000-memory.dmp
memory/2684-8-0x00007FFB46480000-0x00007FFB46EB8000-memory.dmp
memory/2684-9-0x00007FFB46480000-0x00007FFB46EB8000-memory.dmp
memory/2684-10-0x00007FFB46480000-0x00007FFB46EB8000-memory.dmp
memory/2684-11-0x00000000012E0000-0x00000000012E8000-memory.dmp
memory/2684-12-0x00007FFB46480000-0x00007FFB46EB8000-memory.dmp
memory/2684-13-0x00007FFB46480000-0x00007FFB46EB8000-memory.dmp
memory/2684-14-0x00007FFB46480000-0x00007FFB46EB8000-memory.dmp
memory/2684-15-0x00007FFB46480000-0x00007FFB46EB8000-memory.dmp