Analysis
- max time kernel
149s - max time network
129s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
- submitted
10/09/2026, 04:06
General
- Target jaffacakes118_Ghost.in.the.Shell.2.Innocence.XviD.720p-djcj.exe
- Size 1.2MB
- Sample260910-epdngaxbkf
- SHA256 9df486db6a4cd545410f8cbcd4bebcc175a9c5ab9d9729a65501b28f851e9702
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 9 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Ghost.in.the.Shell.2.Innocence.XviD.720p-djcj.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Ghost.in.the.Shell.2.Innocence.XviD.720p-djcj.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2984-0-0x00007FFDBA525000-0x00007FFDBA526000-memory.dmp
memory/2984-1-0x00007FFDBA270000-0x00007FFDBAC11000-memory.dmp
memory/2984-2-0x00007FFDBA270000-0x00007FFDBAC11000-memory.dmp
memory/2984-3-0x000000001B570000-0x000000001BA3E000-memory.dmp
memory/2984-4-0x000000001BAE0000-0x000000001BB7C000-memory.dmp
memory/2984-5-0x000000001BBF0000-0x000000001BC52000-memory.dmp
memory/2984-6-0x000000001C130000-0x000000001C200000-memory.dmp
memory/2984-8-0x00007FFDBA270000-0x00007FFDBAC11000-memory.dmp
memory/2984-9-0x0000000000A60000-0x0000000000A68000-memory.dmp
memory/2984-10-0x00007FFDBA270000-0x00007FFDBAC11000-memory.dmp
memory/2984-11-0x00007FFDBA270000-0x00007FFDBAC11000-memory.dmp
memory/2984-12-0x00007FFDBA270000-0x00007FFDBAC11000-memory.dmp
memory/2984-13-0x00007FFDBA270000-0x00007FFDBAC11000-memory.dmp
memory/2984-14-0x00007FFDBA270000-0x00007FFDBAC11000-memory.dmp
memory/2984-15-0x00007FFDBA270000-0x00007FFDBAC11000-memory.dmp
memory/2984-16-0x00007FFDBA270000-0x00007FFDBAC11000-memory.dmp
memory/2984-17-0x00007FFDBA270000-0x00007FFDBAC11000-memory.dmp
memory/2984-18-0x00007FFDBA270000-0x00007FFDBAC11000-memory.dmp
memory/2984-19-0x00007FFDBA270000-0x00007FFDBAC11000-memory.dmp
memory/2984-21-0x00007FFDBA270000-0x00007FFDBAC11000-memory.dmp