Analysis
- max time kernel
150s - max time network
150s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
10/09/2026, 03:53
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_Der.Ruf.des.Vulkans.Wie.berechenbar.sind.Vulkane.GERMAN.DOKU.WS.dTV.XViD-MiSFiTS.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_Der.Ruf.des.Vulkans.Wie.berechenbar.sind.Vulkane.GERMAN.DOKU.WS.dTV.XViD-MiSFiTS.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
General
- Target jaffacakes118_Der.Ruf.des.Vulkans.Wie.berechenbar.sind.Vulkane.GERMAN.DOKU.WS.dTV.XViD-MiSFiTS.exe
- Size 6.2MB
- Sample260910-ef3w1ayxav
- SHA256 5569111c0175dcc558293b0fa8f9564eec31e857be6ac46f8db70ba031be8ace
- MD5 adf0653e5d25bef5675c7d2813ff9283
- SHA1 a79ca3201fe7a51d809ebf3b82adf794d4654c18
- SHA512 4a7116b8ac570becf4fd1f8985fdd46d0a28ec8448084e5cb6f2d81f8fc4ac107eb2e3f64e36200239becad5fbd21afb8ef19333ea9268bdcf36ae1ead6e04c0
- SSDEEP 6144:Ojit8HexorKlkvmJQzS9sXOhY7HtGcwEYMZN/hF/vKqmE1L:Ojit8HexorKlkvmJQzS9sXOhY7JwWf9
- TLSH T198664D00736A8622DBAF87FFC4E10F20573195969A85DB4B79CC25E01E253EAC5CB17E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 7 IoCs
description pid Process Token: SeDebugPrivilege 3140 jaffacakes118_Der.Ruf.des.Vulkans.Wie.berechenbar.sind.Vulkane.GERMAN.DOKU.WS.dTV.XViD-MiSFiTS.exe Token: 33 3140 jaffacakes118_Der.Ruf.des.Vulkans.Wie.berechenbar.sind.Vulkane.GERMAN.DOKU.WS.dTV.XViD-MiSFiTS.exe Token: SeIncBasePriorityPrivilege 3140 jaffacakes118_Der.Ruf.des.Vulkans.Wie.berechenbar.sind.Vulkane.GERMAN.DOKU.WS.dTV.XViD-MiSFiTS.exe Token: 33 3140 jaffacakes118_Der.Ruf.des.Vulkans.Wie.berechenbar.sind.Vulkane.GERMAN.DOKU.WS.dTV.XViD-MiSFiTS.exe Token: SeIncBasePriorityPrivilege 3140 jaffacakes118_Der.Ruf.des.Vulkans.Wie.berechenbar.sind.Vulkane.GERMAN.DOKU.WS.dTV.XViD-MiSFiTS.exe Token: 33 3140 jaffacakes118_Der.Ruf.des.Vulkans.Wie.berechenbar.sind.Vulkane.GERMAN.DOKU.WS.dTV.XViD-MiSFiTS.exe Token: SeIncBasePriorityPrivilege 3140 jaffacakes118_Der.Ruf.des.Vulkans.Wie.berechenbar.sind.Vulkane.GERMAN.DOKU.WS.dTV.XViD-MiSFiTS.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Der.Ruf.des.Vulkans.Wie.berechenbar.sind.Vulkane.GERMAN.DOKU.WS.dTV.XViD-MiSFiTS.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Der.Ruf.des.Vulkans.Wie.berechenbar.sind.Vulkane.GERMAN.DOKU.WS.dTV.XViD-MiSFiTS.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
PID:3140