Analysis
- max time kernel
148s - max time network
144s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
10/09/2026, 03:54
General
- Target jaffacakes118_Der.Zauberer.von.OZ.1939.German.BluRay.1080p-x264Crew .exe
- Size 4.0MB
- Sample260910-ef8ggsfb88
- SHA256 e08abb10318660487f48b738293c0abb6a7fe03dcdf537a5f06327851105091b
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 9 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Der.Zauberer.von.OZ.1939.German.BluRay.1080p-x264Crew .exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Der.Zauberer.von.OZ.1939.German.BluRay.1080p-x264Crew .exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/5816-0-0x00007FF96020A000-0x00007FF96020B000-memory.dmp
memory/5816-1-0x00007FF95FF10000-0x00007FF960948000-memory.dmp
memory/5816-2-0x00007FF95FF10000-0x00007FF960948000-memory.dmp
memory/5816-3-0x000000001C240000-0x000000001C70E000-memory.dmp
memory/5816-4-0x000000001C710000-0x000000001C7AC000-memory.dmp
memory/5816-5-0x000000001C820000-0x000000001C882000-memory.dmp
memory/5816-7-0x000000001CD60000-0x000000001CE30000-memory.dmp
memory/5816-6-0x00007FF95FF10000-0x00007FF960948000-memory.dmp
memory/5816-9-0x00007FF95FF10000-0x00007FF960948000-memory.dmp
memory/5816-10-0x00007FF95FF10000-0x00007FF960948000-memory.dmp
memory/5816-11-0x00007FF95FF10000-0x00007FF960948000-memory.dmp
memory/5816-12-0x00007FF95FF10000-0x00007FF960948000-memory.dmp
memory/5816-14-0x0000000001410000-0x0000000001418000-memory.dmp
memory/5816-13-0x00007FF95FF10000-0x00007FF960948000-memory.dmp
memory/5816-15-0x00007FF95FF10000-0x00007FF960948000-memory.dmp
memory/5816-16-0x00007FF95FF10000-0x00007FF960948000-memory.dmp
memory/5816-17-0x00007FF95FF10000-0x00007FF960948000-memory.dmp
memory/5816-18-0x00007FF95FF10000-0x00007FF960948000-memory.dmp
memory/5816-19-0x00007FF95FF10000-0x00007FF960948000-memory.dmp
memory/5816-20-0x00007FF95FF10000-0x00007FF960948000-memory.dmp
memory/5816-21-0x00007FF95FF10000-0x00007FF960948000-memory.dmp
memory/5816-22-0x00007FF95FF10000-0x00007FF960948000-memory.dmp