Analysis
- max time kernel
150s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260710-en - resource tags
- submitted
10/09/2026, 04:19
General
- Target jaffacakes118_Von den Nazis zur Nasa.exe
- Size 4.8MB
- Sample260910-exsglafn9s
- SHA256 45fc336c7c13b0a451c224d9a9084858e4486b98400b37053d5e6cfe580e10aa
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 5 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Von den Nazis zur Nasa.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Von den Nazis zur Nasa.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3352-0-0x00007FFB11FEA000-0x00007FFB11FEB000-memory.dmp
memory/3352-1-0x00007FFB11CF0000-0x00007FFB12728000-memory.dmp
memory/3352-2-0x000000001BF80000-0x000000001C44E000-memory.dmp
memory/3352-3-0x000000001C4F0000-0x000000001C58C000-memory.dmp
memory/3352-4-0x000000001C600000-0x000000001C662000-memory.dmp
memory/3352-6-0x000000001CB40000-0x000000001CC10000-memory.dmp
memory/3352-5-0x00007FFB11CF0000-0x00007FFB12728000-memory.dmp
memory/3352-8-0x00007FFB11CF0000-0x00007FFB12728000-memory.dmp
memory/3352-9-0x00007FFB11CF0000-0x00007FFB12728000-memory.dmp
memory/3352-10-0x0000000002C20000-0x0000000002C28000-memory.dmp
memory/3352-11-0x00007FFB11CF0000-0x00007FFB12728000-memory.dmp
memory/3352-13-0x00007FFB11CF0000-0x00007FFB12728000-memory.dmp
memory/3352-12-0x00007FFB11CF0000-0x00007FFB12728000-memory.dmp
memory/3352-14-0x00007FFB11CF0000-0x00007FFB12728000-memory.dmp
memory/3352-15-0x00007FFB11CF0000-0x00007FFB12728000-memory.dmp
memory/3352-16-0x00007FFB11CF0000-0x00007FFB12728000-memory.dmp
memory/3352-17-0x00007FFB11CF0000-0x00007FFB12728000-memory.dmp
memory/3352-18-0x00007FFB11CF0000-0x00007FFB12728000-memory.dmp
memory/3352-19-0x00007FFB11CF0000-0x00007FFB12728000-memory.dmp