Analysis
- max time kernel
149s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
10/09/2026, 04:01
General
- Target jaffacakes118_Auf.der.Suche.nach.dem.Goldenen.Kind.1986.German.DVDRiP.AC3.XviD.exe
- Size 5.2MB
- Sample260910-elpassfk4y
- SHA256 7cfa93f8544254a874cc6ebb238127155e23a4d0819023f5751df2e12759f420
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 5 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Auf.der.Suche.nach.dem.Goldenen.Kind.1986.German.DVDRiP.AC3.XviD.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Auf.der.Suche.nach.dem.Goldenen.Kind.1986.German.DVDRiP.AC3.XviD.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/952-0-0x00007FFA3910A000-0x00007FFA3910B000-memory.dmp
memory/952-1-0x00007FFA38E10000-0x00007FFA39848000-memory.dmp
memory/952-2-0x000000001C210000-0x000000001C6DE000-memory.dmp
memory/952-3-0x000000001C780000-0x000000001C81C000-memory.dmp
memory/952-4-0x000000001C890000-0x000000001C8F2000-memory.dmp
memory/952-5-0x000000001CDD0000-0x000000001CEA0000-memory.dmp
memory/952-7-0x00007FFA38E10000-0x00007FFA39848000-memory.dmp
memory/952-8-0x00007FFA38E10000-0x00007FFA39848000-memory.dmp
memory/952-9-0x00007FFA38E10000-0x00007FFA39848000-memory.dmp
memory/952-10-0x00007FFA38E10000-0x00007FFA39848000-memory.dmp
memory/952-11-0x00007FFA38E10000-0x00007FFA39848000-memory.dmp
memory/952-12-0x00000000016E0000-0x00000000016E8000-memory.dmp
memory/952-13-0x00007FFA38E10000-0x00007FFA39848000-memory.dmp
memory/952-14-0x00007FFA38E10000-0x00007FFA39848000-memory.dmp
memory/952-15-0x00007FFA38E10000-0x00007FFA39848000-memory.dmp
memory/952-16-0x00007FFA38E10000-0x00007FFA39848000-memory.dmp
memory/952-17-0x00007FFA38E10000-0x00007FFA39848000-memory.dmp
memory/952-18-0x00007FFA38E10000-0x00007FFA39848000-memory.dmp
memory/952-19-0x00007FFA38E10000-0x00007FFA39848000-memory.dmp
memory/952-20-0x00007FFA38E10000-0x00007FFA39848000-memory.dmp
memory/952-21-0x00007FFA38E10000-0x00007FFA39848000-memory.dmp