Analysis
- max time kernel
150s - max time network
151s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260710-en - resource tags
- submitted
10/09/2026, 04:05
General
- Target jaffacakes118_Der.Fantastische.Mr.Fox.2009.German.AC3D.HDRip.XviD-HQR.exe
- Size 5.1MB
- Sample260910-enwsnaxarh
- SHA256 76259ac86655dbd5a78935050e5bc1fac10c8c69680252ff194b2b65d579d301
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 7 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Der.Fantastische.Mr.Fox.2009.German.AC3D.HDRip.XviD-HQR.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Der.Fantastische.Mr.Fox.2009.German.AC3D.HDRip.XviD-HQR.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/5660-0-0x00007FF9FBD4A000-0x00007FF9FBD4B000-memory.dmp
memory/5660-1-0x00007FF9FBA50000-0x00007FF9FC488000-memory.dmp
memory/5660-2-0x000000001C1C0000-0x000000001C68E000-memory.dmp
memory/5660-4-0x000000001C730000-0x000000001C7CC000-memory.dmp
memory/5660-3-0x00007FF9FBA50000-0x00007FF9FC488000-memory.dmp
memory/5660-5-0x000000001C840000-0x000000001C8A2000-memory.dmp
memory/5660-6-0x000000001CD80000-0x000000001CE50000-memory.dmp
memory/5660-8-0x00007FF9FBA50000-0x00007FF9FC488000-memory.dmp
memory/5660-9-0x00007FF9FBA50000-0x00007FF9FC488000-memory.dmp
memory/5660-10-0x00007FF9FBA50000-0x00007FF9FC488000-memory.dmp
memory/5660-11-0x00000000015A0000-0x00000000015A8000-memory.dmp
memory/5660-12-0x00007FF9FBA50000-0x00007FF9FC488000-memory.dmp
memory/5660-13-0x00007FF9FBA50000-0x00007FF9FC488000-memory.dmp
memory/5660-14-0x00007FF9FBA50000-0x00007FF9FC488000-memory.dmp
memory/5660-15-0x00007FF9FBA50000-0x00007FF9FC488000-memory.dmp
memory/5660-16-0x00007FF9FBA50000-0x00007FF9FC488000-memory.dmp
memory/5660-17-0x00007FF9FBA50000-0x00007FF9FC488000-memory.dmp
memory/5660-18-0x00007FF9FBA50000-0x00007FF9FC488000-memory.dmp
memory/5660-19-0x00007FF9FBA50000-0x00007FF9FC488000-memory.dmp
memory/5660-20-0x00007FF9FBA50000-0x00007FF9FC488000-memory.dmp