Analysis
- max time kernel
150s - max time network
145s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
- submitted
10/09/2026, 04:01
General
- Target jaffacakes118_Auf.der.Suche.nach.dem.Goldenen.Kind.1986.German.DVDRiP.AC3.XviD.exe
- Size 5.2MB
- Sample260910-elpassfk4y
- SHA256 7cfa93f8544254a874cc6ebb238127155e23a4d0819023f5751df2e12759f420
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 7 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Auf.der.Suche.nach.dem.Goldenen.Kind.1986.German.DVDRiP.AC3.XviD.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Auf.der.Suche.nach.dem.Goldenen.Kind.1986.German.DVDRiP.AC3.XviD.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/5028-0-0x00007FFBF8125000-0x00007FFBF8126000-memory.dmp
memory/5028-1-0x00007FFBF7E70000-0x00007FFBF8811000-memory.dmp
memory/5028-2-0x00007FFBF7E70000-0x00007FFBF8811000-memory.dmp
memory/5028-3-0x000000001C370000-0x000000001C83E000-memory.dmp
memory/5028-4-0x000000001C8E0000-0x000000001C97C000-memory.dmp
memory/5028-5-0x000000001C9F0000-0x000000001CA52000-memory.dmp
memory/5028-6-0x000000001CF30000-0x000000001D000000-memory.dmp
memory/5028-8-0x00007FFBF7E70000-0x00007FFBF8811000-memory.dmp
memory/5028-9-0x00007FFBF7E70000-0x00007FFBF8811000-memory.dmp
memory/5028-11-0x0000000001770000-0x0000000001778000-memory.dmp
memory/5028-10-0x00007FFBF7E70000-0x00007FFBF8811000-memory.dmp
memory/5028-12-0x00007FFBF7E70000-0x00007FFBF8811000-memory.dmp
memory/5028-13-0x00007FFBF7E70000-0x00007FFBF8811000-memory.dmp
memory/5028-14-0x00007FFBF7E70000-0x00007FFBF8811000-memory.dmp
memory/5028-15-0x00007FFBF7E70000-0x00007FFBF8811000-memory.dmp
memory/5028-16-0x00007FFBF7E70000-0x00007FFBF8811000-memory.dmp
memory/5028-17-0x00007FFBF7E70000-0x00007FFBF8811000-memory.dmp
memory/5028-18-0x00007FFBF7E70000-0x00007FFBF8811000-memory.dmp
memory/5028-19-0x00007FFBF7E70000-0x00007FFBF8811000-memory.dmp
memory/5028-20-0x00007FFBF7E70000-0x00007FFBF8811000-memory.dmp
memory/5028-22-0x00007FFBF7E70000-0x00007FFBF8811000-memory.dmp