Analysis
- max time kernel
149s - max time network
148s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
- submitted
10/09/2026, 04:12
General
- Target jaffacakes118_Badesalz.Das.Baby.mit.dem.Goldzahn.German.2008.DVDRiP.XviD-XF _mirror_.exe
- Size 10.2MB
- Sample260910-esjznaxcjb
- SHA256 82a8a00fc35c42aea6d56f2d7a923c5081a85e9080fb61cfc633ea9b8e23e4da
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 9 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Badesalz.Das.Baby.mit.dem.Goldzahn.German.2008.DVDRiP.XviD-XF _mirror_.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Badesalz.Das.Baby.mit.dem.Goldzahn.German.2008.DVDRiP.XviD-XF _mirror_.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2928-0-0x00007FFE0AC85000-0x00007FFE0AC86000-memory.dmp
memory/2928-1-0x00007FFE0A9D0000-0x00007FFE0B371000-memory.dmp
memory/2928-2-0x00007FFE0A9D0000-0x00007FFE0B371000-memory.dmp
memory/2928-3-0x00007FFE0A9D0000-0x00007FFE0B371000-memory.dmp
memory/2928-4-0x000000001B760000-0x000000001BC2E000-memory.dmp
memory/2928-6-0x000000001BDE0000-0x000000001BE42000-memory.dmp
memory/2928-5-0x000000001BCD0000-0x000000001BD6C000-memory.dmp
memory/2928-7-0x000000001C320000-0x000000001C3F0000-memory.dmp
memory/2928-9-0x00007FFE0A9D0000-0x00007FFE0B371000-memory.dmp
memory/2928-10-0x0000000000B60000-0x0000000000B68000-memory.dmp
memory/2928-11-0x00007FFE0A9D0000-0x00007FFE0B371000-memory.dmp
memory/2928-12-0x00007FFE0A9D0000-0x00007FFE0B371000-memory.dmp
memory/2928-13-0x00007FFE0A9D0000-0x00007FFE0B371000-memory.dmp
memory/2928-14-0x00007FFE0A9D0000-0x00007FFE0B371000-memory.dmp
memory/2928-15-0x00007FFE0A9D0000-0x00007FFE0B371000-memory.dmp
memory/2928-16-0x00007FFE0A9D0000-0x00007FFE0B371000-memory.dmp
memory/2928-17-0x00007FFE0A9D0000-0x00007FFE0B371000-memory.dmp
memory/2928-18-0x00007FFE0A9D0000-0x00007FFE0B371000-memory.dmp
memory/2928-20-0x00007FFE0A9D0000-0x00007FFE0B371000-memory.dmp