Analysis
- max time kernel
148s - max time network
153s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
10/09/2026, 03:52
General
- Target jaffacakes118_City.of.Ember.Flucht.aus.der.Dunkelheit.German.2008.DVDRip.XviD-ViDEOWELT _mirror_.exe
- Size 3.2MB
- Sample260910-efdxwaer5v
- SHA256 031ae20c7594c7c4d827188a27af05398bddf67b5e3dae494c01c1f459e43518
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 7 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_City.of.Ember.Flucht.aus.der.Dunkelheit.German.2008.DVDRip.XviD-ViDEOWELT _mirror_.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_City.of.Ember.Flucht.aus.der.Dunkelheit.German.2008.DVDRip.XviD-ViDEOWELT _mirror_.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4860-0-0x00007FFF25C2A000-0x00007FFF25C2B000-memory.dmp
memory/4860-1-0x00007FFF25930000-0x00007FFF26368000-memory.dmp
memory/4860-2-0x000000001BD80000-0x000000001C24E000-memory.dmp
memory/4860-4-0x000000001C400000-0x000000001C462000-memory.dmp
memory/4860-3-0x000000001C2F0000-0x000000001C38C000-memory.dmp
memory/4860-5-0x00007FFF25930000-0x00007FFF26368000-memory.dmp
memory/4860-6-0x000000001C940000-0x000000001CA10000-memory.dmp
memory/4860-8-0x00007FFF25930000-0x00007FFF26368000-memory.dmp
memory/4860-9-0x00007FFF25930000-0x00007FFF26368000-memory.dmp
memory/4860-10-0x00007FFF25930000-0x00007FFF26368000-memory.dmp
memory/4860-11-0x00007FFF25930000-0x00007FFF26368000-memory.dmp
memory/4860-12-0x00007FFF25930000-0x00007FFF26368000-memory.dmp
memory/4860-13-0x00007FFF25930000-0x00007FFF26368000-memory.dmp
memory/4860-15-0x0000000001160000-0x0000000001168000-memory.dmp
memory/4860-14-0x00007FFF25930000-0x00007FFF26368000-memory.dmp
memory/4860-16-0x00007FFF25930000-0x00007FFF26368000-memory.dmp
memory/4860-17-0x00007FFF25930000-0x00007FFF26368000-memory.dmp
memory/4860-18-0x00007FFF25930000-0x00007FFF26368000-memory.dmp
memory/4860-19-0x00007FFF25930000-0x00007FFF26368000-memory.dmp
memory/4860-20-0x00007FFF25930000-0x00007FFF26368000-memory.dmp
memory/4860-21-0x00007FFF25930000-0x00007FFF26368000-memory.dmp
memory/4860-22-0x00007FFF25930000-0x00007FFF26368000-memory.dmp
memory/4860-23-0x00007FFF25930000-0x00007FFF26368000-memory.dmp