Analysis
- max time kernel
150s - max time network
142s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
10/09/2026, 04:16
General
- Target jaffacakes118_The.Color.of.Magic.Teil2.2008.German.720p.BluRay.x264-DETAiLS.exe
- Size 529KB
- Sample260910-ewbgpaztcv
- SHA256 08de19ea28affad57c2d79d2abbbe0d9e26ac87c0075af746eae0d26af864904
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 7 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_The.Color.of.Magic.Teil2.2008.German.720p.BluRay.x264-DETAiLS.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_The.Color.of.Magic.Teil2.2008.German.720p.BluRay.x264-DETAiLS.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4648-0-0x00007FFBAD2FA000-0x00007FFBAD2FB000-memory.dmp
memory/4648-1-0x00007FFBAD000000-0x00007FFBADA38000-memory.dmp
memory/4648-2-0x000000001C280000-0x000000001C74E000-memory.dmp
memory/4648-3-0x000000001C7F0000-0x000000001C88C000-memory.dmp
memory/4648-4-0x000000001C900000-0x000000001C962000-memory.dmp
memory/4648-6-0x000000001CE40000-0x000000001CF10000-memory.dmp
memory/4648-5-0x00007FFBAD000000-0x00007FFBADA38000-memory.dmp
memory/4648-8-0x00007FFBAD000000-0x00007FFBADA38000-memory.dmp
memory/4648-9-0x00007FFBAD000000-0x00007FFBADA38000-memory.dmp
memory/4648-10-0x00007FFBAD000000-0x00007FFBADA38000-memory.dmp
memory/4648-11-0x00007FFBAD000000-0x00007FFBADA38000-memory.dmp
memory/4648-12-0x0000000001750000-0x0000000001758000-memory.dmp
memory/4648-13-0x00007FFBAD000000-0x00007FFBADA38000-memory.dmp
memory/4648-14-0x00007FFBAD000000-0x00007FFBADA38000-memory.dmp
memory/4648-15-0x00007FFBAD000000-0x00007FFBADA38000-memory.dmp
memory/4648-16-0x00007FFBAD000000-0x00007FFBADA38000-memory.dmp
memory/4648-17-0x00007FFBAD000000-0x00007FFBADA38000-memory.dmp
memory/4648-18-0x00007FFBAD000000-0x00007FFBADA38000-memory.dmp
memory/4648-19-0x00007FFBAD000000-0x00007FFBADA38000-memory.dmp
memory/4648-20-0x00007FFBAD000000-0x00007FFBADA38000-memory.dmp
memory/4648-21-0x00007FFBAD000000-0x00007FFBADA38000-memory.dmp
memory/4648-22-0x00007FFBAD000000-0x00007FFBADA38000-memory.dmp
memory/4648-23-0x00007FFBAD000000-0x00007FFBADA38000-memory.dmp