Analysis
- max time kernel
150s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
10/09/2026, 04:11
General
- Target jaffacakes118_Der.Ja.Sager.2008.German.AC3D.DL.720p.BluRay.x264-AB7.exe
- Size 5.9MB
- Sample260910-er95fsxbrd
- SHA256 5b5d7d03073734a42e5ca3a2fdc75c164b57818715f02a726710a70ba4740edb
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 7 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Der.Ja.Sager.2008.German.AC3D.DL.720p.BluRay.x264-AB7.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Der.Ja.Sager.2008.German.AC3D.DL.720p.BluRay.x264-AB7.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3368-0-0x00007FF8C7D4A000-0x00007FF8C7D4B000-memory.dmp
memory/3368-1-0x00007FF8C7A50000-0x00007FF8C8488000-memory.dmp
memory/3368-2-0x00007FF8C7A50000-0x00007FF8C8488000-memory.dmp
memory/3368-3-0x000000001B6A0000-0x000000001BB6E000-memory.dmp
memory/3368-7-0x000000001C260000-0x000000001C330000-memory.dmp
memory/3368-9-0x00007FF8C7A50000-0x00007FF8C8488000-memory.dmp
memory/3368-6-0x00007FF8C7A50000-0x00007FF8C8488000-memory.dmp
memory/3368-10-0x00007FF8C7A50000-0x00007FF8C8488000-memory.dmp
memory/3368-5-0x000000001BD20000-0x000000001BD82000-memory.dmp
memory/3368-4-0x000000001BC10000-0x000000001BCAC000-memory.dmp
memory/3368-11-0x00007FF8C7A50000-0x00007FF8C8488000-memory.dmp
memory/3368-13-0x00007FF8C7A50000-0x00007FF8C8488000-memory.dmp
memory/3368-12-0x0000000002340000-0x0000000002348000-memory.dmp
memory/3368-14-0x00007FF8C7A50000-0x00007FF8C8488000-memory.dmp
memory/3368-15-0x00007FF8C7A50000-0x00007FF8C8488000-memory.dmp
memory/3368-16-0x00007FF8C7A50000-0x00007FF8C8488000-memory.dmp
memory/3368-17-0x00007FF8C7A50000-0x00007FF8C8488000-memory.dmp
memory/3368-18-0x00007FF8C7A50000-0x00007FF8C8488000-memory.dmp
memory/3368-19-0x00007FF8C7A50000-0x00007FF8C8488000-memory.dmp
memory/3368-20-0x00007FF8C7A50000-0x00007FF8C8488000-memory.dmp
memory/3368-21-0x00007FF8C7A50000-0x00007FF8C8488000-memory.dmp
memory/3368-22-0x00007FF8C7A50000-0x00007FF8C8488000-memory.dmp