Analysis
- max time kernel
150s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
10/09/2026, 04:18
General
- Target jaffacakes118_Badesalz.Das.Baby.mit.dem.Goldzahn.German.2008.PAL.DVDR-DF.exe
- Size 3.5MB
- Sample260910-exekqsxdme
- SHA256 ca2656a5dd2ddf2cf8d9316102fd5b8c33a0960db4b9e11a520de56bdb586425
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 9 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Badesalz.Das.Baby.mit.dem.Goldzahn.German.2008.PAL.DVDR-DF.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Badesalz.Das.Baby.mit.dem.Goldzahn.German.2008.PAL.DVDR-DF.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4436-0-0x00007FFB9205A000-0x00007FFB9205B000-memory.dmp
memory/4436-1-0x00007FFB91D60000-0x00007FFB92798000-memory.dmp
memory/4436-2-0x00007FFB91D60000-0x00007FFB92798000-memory.dmp
memory/4436-3-0x000000001BEB0000-0x000000001C37E000-memory.dmp
memory/4436-5-0x000000001C530000-0x000000001C592000-memory.dmp
memory/4436-4-0x000000001C420000-0x000000001C4BC000-memory.dmp
memory/4436-6-0x000000001CA70000-0x000000001CB40000-memory.dmp
memory/4436-8-0x00007FFB91D60000-0x00007FFB92798000-memory.dmp
memory/4436-9-0x00007FFB91D60000-0x00007FFB92798000-memory.dmp
memory/4436-10-0x00007FFB91D60000-0x00007FFB92798000-memory.dmp
memory/4436-11-0x00007FFB91D60000-0x00007FFB92798000-memory.dmp
memory/4436-12-0x00007FFB91D60000-0x00007FFB92798000-memory.dmp
memory/4436-14-0x00007FFB91D60000-0x00007FFB92798000-memory.dmp
memory/4436-13-0x00000000013A0000-0x00000000013A8000-memory.dmp
memory/4436-15-0x00007FFB91D60000-0x00007FFB92798000-memory.dmp
memory/4436-16-0x00007FFB91D60000-0x00007FFB92798000-memory.dmp
memory/4436-17-0x00007FFB91D60000-0x00007FFB92798000-memory.dmp
memory/4436-18-0x00007FFB91D60000-0x00007FFB92798000-memory.dmp
memory/4436-19-0x00007FFB91D60000-0x00007FFB92798000-memory.dmp
memory/4436-20-0x00007FFB91D60000-0x00007FFB92798000-memory.dmp
memory/4436-21-0x00007FFB91D60000-0x00007FFB92798000-memory.dmp
memory/4436-22-0x00007FFB91D60000-0x00007FFB92798000-memory.dmp
memory/4436-23-0x00007FFB91D60000-0x00007FFB92798000-memory.dmp