Analysis
- max time kernel
150s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
10/09/2026, 04:02
General
- Target jaffacakes118_Arthur.und.die.Minimoys.2.Die.Rueckkehr.des.Boesen.M.2009.German.DTS.720p.Bluray.x264-SoW.exe
- Size 1.7MB
- Sample260910-el8pfayza1
- SHA256 ecf22f6d2b8895189cb7298399a9e05dc79a0c2cde19cfb785af84e81000295e
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 7 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Arthur.und.die.Minimoys.2.Die.Rueckkehr.des.Boesen.M.2009.German.DTS.720p.Bluray.x264-SoW.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Arthur.und.die.Minimoys.2.Die.Rueckkehr.des.Boesen.M.2009.German.DTS.720p.Bluray.x264-SoW.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3688-0-0x00007FFCEE66A000-0x00007FFCEE66B000-memory.dmp
memory/3688-1-0x00007FFCEE370000-0x00007FFCEEDA8000-memory.dmp
memory/3688-2-0x00007FFCEE370000-0x00007FFCEEDA8000-memory.dmp
memory/3688-4-0x00007FFCEE370000-0x00007FFCEEDA8000-memory.dmp
memory/3688-6-0x000000001BDD0000-0x000000001BE32000-memory.dmp
memory/3688-5-0x000000001BCC0000-0x000000001BD5C000-memory.dmp
memory/3688-3-0x000000001B750000-0x000000001BC1E000-memory.dmp
memory/3688-8-0x00007FFCEE370000-0x00007FFCEEDA8000-memory.dmp
memory/3688-7-0x000000001C310000-0x000000001C3E0000-memory.dmp
memory/3688-10-0x00007FFCEE370000-0x00007FFCEEDA8000-memory.dmp
memory/3688-11-0x00007FFCEE370000-0x00007FFCEEDA8000-memory.dmp
memory/3688-12-0x00007FFCEE370000-0x00007FFCEEDA8000-memory.dmp
memory/3688-13-0x00007FFCEE370000-0x00007FFCEEDA8000-memory.dmp
memory/3688-14-0x00007FFCEE370000-0x00007FFCEEDA8000-memory.dmp
memory/3688-15-0x00007FFCEE370000-0x00007FFCEEDA8000-memory.dmp
memory/3688-16-0x00007FFCEE370000-0x00007FFCEEDA8000-memory.dmp
memory/3688-18-0x00007FFCEE370000-0x00007FFCEEDA8000-memory.dmp
memory/3688-17-0x0000000000C30000-0x0000000000C38000-memory.dmp
memory/3688-19-0x00007FFCEE370000-0x00007FFCEEDA8000-memory.dmp
memory/3688-20-0x00007FFCEE370000-0x00007FFCEEDA8000-memory.dmp
memory/3688-21-0x00007FFCEE370000-0x00007FFCEEDA8000-memory.dmp
memory/3688-22-0x00007FFCEE370000-0x00007FFCEEDA8000-memory.dmp
memory/3688-23-0x00007FFCEE370000-0x00007FFCEEDA8000-memory.dmp
memory/3688-24-0x00007FFCEE370000-0x00007FFCEEDA8000-memory.dmp
memory/3688-25-0x00007FFCEE370000-0x00007FFCEEDA8000-memory.dmp
memory/3688-26-0x00007FFCEE370000-0x00007FFCEEDA8000-memory.dmp