Analysis
- max time kernel
149s - max time network
136s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
- submitted
10/09/2026, 04:18
General
- Target jaffacakes118_Badesalz.Das.Baby.mit.dem.Goldzahn.German.2008.PAL.DVDR-DF.exe
- Size 3.5MB
- Sample260910-exekqsxdme
- SHA256 ca2656a5dd2ddf2cf8d9316102fd5b8c33a0960db4b9e11a520de56bdb586425
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 9 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Badesalz.Das.Baby.mit.dem.Goldzahn.German.2008.PAL.DVDR-DF.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Badesalz.Das.Baby.mit.dem.Goldzahn.German.2008.PAL.DVDR-DF.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4800-0-0x00007FFE5C3D5000-0x00007FFE5C3D6000-memory.dmp
memory/4800-1-0x00007FFE5C120000-0x00007FFE5CAC1000-memory.dmp
memory/4800-2-0x000000001C370000-0x000000001C83E000-memory.dmp
memory/4800-3-0x00007FFE5C120000-0x00007FFE5CAC1000-memory.dmp
memory/4800-4-0x000000001C8E0000-0x000000001C97C000-memory.dmp
memory/4800-5-0x000000001C9F0000-0x000000001CA52000-memory.dmp
memory/4800-6-0x000000001CF30000-0x000000001D000000-memory.dmp
memory/4800-8-0x00007FFE5C120000-0x00007FFE5CAC1000-memory.dmp
memory/4800-9-0x00007FFE5C120000-0x00007FFE5CAC1000-memory.dmp
memory/4800-10-0x00007FFE5C120000-0x00007FFE5CAC1000-memory.dmp
memory/4800-11-0x0000000001760000-0x0000000001768000-memory.dmp
memory/4800-12-0x00007FFE5C120000-0x00007FFE5CAC1000-memory.dmp
memory/4800-13-0x00007FFE5C120000-0x00007FFE5CAC1000-memory.dmp
memory/4800-14-0x00007FFE5C120000-0x00007FFE5CAC1000-memory.dmp
memory/4800-15-0x00007FFE5C120000-0x00007FFE5CAC1000-memory.dmp
memory/4800-16-0x00007FFE5C120000-0x00007FFE5CAC1000-memory.dmp
memory/4800-17-0x00007FFE5C120000-0x00007FFE5CAC1000-memory.dmp
memory/4800-18-0x00007FFE5C120000-0x00007FFE5CAC1000-memory.dmp
memory/4800-19-0x00007FFE5C120000-0x00007FFE5CAC1000-memory.dmp
memory/4800-20-0x00007FFE5C120000-0x00007FFE5CAC1000-memory.dmp
memory/4800-22-0x00007FFE5C120000-0x00007FFE5CAC1000-memory.dmp