Analysis
- max time kernel
149s - max time network
134s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
- submitted
10/09/2026, 04:21
General
- Target jaffacakes118_Findet.Nemo.German.2003.AC3.DVDRiP.XviD.READ.NFO.iNTERNAL-RESERVOiR.exe
- Size 6.3MB
- Sample260910-ey2rnazva1
- SHA256 743fd9afcb018101de3b784bb36510aa8cb2ba771855f0700dec4e74a4e717a2
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 5 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Findet.Nemo.German.2003.AC3.DVDRiP.XviD.READ.NFO.iNTERNAL-RESERVOiR.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Findet.Nemo.German.2003.AC3.DVDRiP.XviD.READ.NFO.iNTERNAL-RESERVOiR.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3608-0-0x00007FF94A805000-0x00007FF94A806000-memory.dmp
memory/3608-1-0x00007FF94A550000-0x00007FF94AEF1000-memory.dmp
memory/3608-2-0x00007FF94A550000-0x00007FF94AEF1000-memory.dmp
memory/3608-3-0x000000001C440000-0x000000001C90E000-memory.dmp
memory/3608-4-0x000000001C9B0000-0x000000001CA4C000-memory.dmp
memory/3608-5-0x000000001CAC0000-0x000000001CB22000-memory.dmp
memory/3608-6-0x000000001D000000-0x000000001D0D0000-memory.dmp
memory/3608-8-0x00007FF94A550000-0x00007FF94AEF1000-memory.dmp
memory/3608-9-0x00007FF94A550000-0x00007FF94AEF1000-memory.dmp
memory/3608-10-0x00007FF94A550000-0x00007FF94AEF1000-memory.dmp
memory/3608-11-0x00007FF94A550000-0x00007FF94AEF1000-memory.dmp
memory/3608-12-0x0000000001730000-0x0000000001738000-memory.dmp
memory/3608-13-0x00007FF94A550000-0x00007FF94AEF1000-memory.dmp
memory/3608-14-0x00007FF94A550000-0x00007FF94AEF1000-memory.dmp
memory/3608-15-0x00007FF94A550000-0x00007FF94AEF1000-memory.dmp
memory/3608-16-0x00007FF94A550000-0x00007FF94AEF1000-memory.dmp
memory/3608-17-0x00007FF94A550000-0x00007FF94AEF1000-memory.dmp
memory/3608-19-0x00007FF94A550000-0x00007FF94AEF1000-memory.dmp