Analysis
- max time kernel
148s - max time network
143s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
10/09/2026, 03:44
General
- Target jaffacakes118_Der.Kannibale.von.Rothenburg.German.2008.DOKU.DISC2.PAL.DVDR-SoW.exe
- Size 7.6MB
- Sample260910-eash3swepc
- SHA256 3a92c94cd0a98f7f9ee7e51de892d6eb81366131115d01d02ab4d1cd9ad54cb6
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 7 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Der.Kannibale.von.Rothenburg.German.2008.DOKU.DISC2.PAL.DVDR-SoW.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Der.Kannibale.von.Rothenburg.German.2008.DOKU.DISC2.PAL.DVDR-SoW.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/784-0-0x00007FF8B868A000-0x00007FF8B868B000-memory.dmp
memory/784-1-0x00007FF8B8390000-0x00007FF8B8DC8000-memory.dmp
memory/784-2-0x00007FF8B8390000-0x00007FF8B8DC8000-memory.dmp
memory/784-3-0x00007FF8B8390000-0x00007FF8B8DC8000-memory.dmp
memory/784-4-0x00007FF8B8390000-0x00007FF8B8DC8000-memory.dmp
memory/784-5-0x000000001C080000-0x000000001C54E000-memory.dmp
memory/784-7-0x000000001C700000-0x000000001C762000-memory.dmp
memory/784-6-0x000000001C5F0000-0x000000001C68C000-memory.dmp
memory/784-8-0x000000001CC40000-0x000000001CD10000-memory.dmp
memory/784-9-0x00007FF8B8390000-0x00007FF8B8DC8000-memory.dmp
memory/784-11-0x00007FF8B8390000-0x00007FF8B8DC8000-memory.dmp
memory/784-12-0x00007FF8B8390000-0x00007FF8B8DC8000-memory.dmp
memory/784-14-0x00007FF8B8390000-0x00007FF8B8DC8000-memory.dmp
memory/784-13-0x00007FF8B8390000-0x00007FF8B8DC8000-memory.dmp
memory/784-15-0x00007FF8B8390000-0x00007FF8B8DC8000-memory.dmp
memory/784-16-0x00007FF8B8390000-0x00007FF8B8DC8000-memory.dmp
memory/784-18-0x0000000002F30000-0x0000000002F38000-memory.dmp
memory/784-17-0x00007FF8B8390000-0x00007FF8B8DC8000-memory.dmp
memory/784-19-0x00007FF8B8390000-0x00007FF8B8DC8000-memory.dmp
memory/784-20-0x00007FF8B8390000-0x00007FF8B8DC8000-memory.dmp
memory/784-21-0x00007FF8B8390000-0x00007FF8B8DC8000-memory.dmp
memory/784-22-0x00007FF8B8390000-0x00007FF8B8DC8000-memory.dmp
memory/784-23-0x00007FF8B8390000-0x00007FF8B8DC8000-memory.dmp
memory/784-24-0x00007FF8B8390000-0x00007FF8B8DC8000-memory.dmp
memory/784-25-0x00007FF8B8390000-0x00007FF8B8DC8000-memory.dmp