Analysis
- max time kernel
148s - max time network
151s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
- submitted
10/09/2026, 04:16
General
- Target jaffacakes118_17.Again.German.BDRip.XviD-CRUCiAL.exe
- Size 7.1MB
- Sample260910-ev9yvsztcs
- SHA256 5baafa9812e11994e7d5543c6d22f7ffbd62e0369382c511f8706d2ff2947c22
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 5 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_17.Again.German.BDRip.XviD-CRUCiAL.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_17.Again.German.BDRip.XviD-CRUCiAL.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3612-0-0x00007FFCDDB55000-0x00007FFCDDB56000-memory.dmp
memory/3612-1-0x00007FFCDD8A0000-0x00007FFCDE241000-memory.dmp
memory/3612-2-0x00007FFCDD8A0000-0x00007FFCDE241000-memory.dmp
memory/3612-3-0x000000001C1F0000-0x000000001C6BE000-memory.dmp
memory/3612-6-0x000000001CDB0000-0x000000001CE80000-memory.dmp
memory/3612-5-0x000000001C870000-0x000000001C8D2000-memory.dmp
memory/3612-4-0x000000001C760000-0x000000001C7FC000-memory.dmp
memory/3612-8-0x00007FFCDD8A0000-0x00007FFCDE241000-memory.dmp
memory/3612-9-0x00007FFCDD8A0000-0x00007FFCDE241000-memory.dmp
memory/3612-10-0x00007FFCDD8A0000-0x00007FFCDE241000-memory.dmp
memory/3612-11-0x00000000016E0000-0x00000000016E8000-memory.dmp
memory/3612-12-0x00007FFCDD8A0000-0x00007FFCDE241000-memory.dmp
memory/3612-13-0x00007FFCDD8A0000-0x00007FFCDE241000-memory.dmp
memory/3612-14-0x00007FFCDD8A0000-0x00007FFCDE241000-memory.dmp
memory/3612-15-0x00007FFCDD8A0000-0x00007FFCDE241000-memory.dmp
memory/3612-16-0x00007FFCDD8A0000-0x00007FFCDE241000-memory.dmp
memory/3612-17-0x00007FFCDD8A0000-0x00007FFCDE241000-memory.dmp
memory/3612-18-0x00007FFCDD8A0000-0x00007FFCDE241000-memory.dmp
memory/3612-19-0x00007FFCDD8A0000-0x00007FFCDE241000-memory.dmp
memory/3612-21-0x00007FFCDD8A0000-0x00007FFCDE241000-memory.dmp