Analysis
- max time kernel
149s - max time network
150s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
- submitted
10/09/2026, 03:44
General
- Target jaffacakes118_Der.Kannibale.von.Rothenburg.German.2008.DOKU.DISC2.PAL.DVDR-SoW.exe
- Size 7.6MB
- Sample260910-eash3swepc
- SHA256 3a92c94cd0a98f7f9ee7e51de892d6eb81366131115d01d02ab4d1cd9ad54cb6
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 7 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Der.Kannibale.von.Rothenburg.German.2008.DOKU.DISC2.PAL.DVDR-SoW.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Der.Kannibale.von.Rothenburg.German.2008.DOKU.DISC2.PAL.DVDR-SoW.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1360-0-0x00007FFFD8185000-0x00007FFFD8186000-memory.dmp
memory/1360-1-0x00007FFFD7ED0000-0x00007FFFD8871000-memory.dmp
memory/1360-2-0x00007FFFD7ED0000-0x00007FFFD8871000-memory.dmp
memory/1360-3-0x00007FFFD7ED0000-0x00007FFFD8871000-memory.dmp
memory/1360-4-0x000000001BA10000-0x000000001BEDE000-memory.dmp
memory/1360-5-0x000000001BF80000-0x000000001C01C000-memory.dmp
memory/1360-6-0x000000001C090000-0x000000001C0F2000-memory.dmp
memory/1360-7-0x00007FFFD7ED0000-0x00007FFFD8871000-memory.dmp
memory/1360-9-0x00007FFFD7ED0000-0x00007FFFD8871000-memory.dmp
memory/1360-8-0x000000001C5D0000-0x000000001C6A0000-memory.dmp
memory/1360-11-0x00007FFFD7ED0000-0x00007FFFD8871000-memory.dmp
memory/1360-12-0x00007FFFD7ED0000-0x00007FFFD8871000-memory.dmp
memory/1360-13-0x00007FFFD7ED0000-0x00007FFFD8871000-memory.dmp
memory/1360-14-0x00007FFFD7ED0000-0x00007FFFD8871000-memory.dmp
memory/1360-15-0x00007FFFD7ED0000-0x00007FFFD8871000-memory.dmp
memory/1360-16-0x00007FFFD7ED0000-0x00007FFFD8871000-memory.dmp
memory/1360-17-0x00007FFFD7ED0000-0x00007FFFD8871000-memory.dmp
memory/1360-18-0x00007FFFD7ED0000-0x00007FFFD8871000-memory.dmp
memory/1360-20-0x00007FFFD7ED0000-0x00007FFFD8871000-memory.dmp
memory/1360-19-0x0000000000D10000-0x0000000000D18000-memory.dmp
memory/1360-21-0x00007FFFD7ED0000-0x00007FFFD8871000-memory.dmp
memory/1360-22-0x00007FFFD7ED0000-0x00007FFFD8871000-memory.dmp
memory/1360-23-0x00007FFFD7ED0000-0x00007FFFD8871000-memory.dmp
memory/1360-25-0x00007FFFD7ED0000-0x00007FFFD8871000-memory.dmp