Analysis
- max time kernel
149s - max time network
146s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260710-en - resource tags
- submitted
10/09/2026, 04:23
General
- Target jaffacakes118_Der.Prinz.Aus.Zamunda.German.1988.DVDRiP.XViD.iNTERNAL-SiGHT.exe
- Size 1.4MB
- Sample260910-ez1wrafd59
- SHA256 7dc173c3a264d1db07d66333a1435df894f6500afd3212cf276471c7e65865c7
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 7 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Der.Prinz.Aus.Zamunda.German.1988.DVDRiP.XViD.iNTERNAL-SiGHT.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Der.Prinz.Aus.Zamunda.German.1988.DVDRiP.XViD.iNTERNAL-SiGHT.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2576-0-0x00007FFD0864A000-0x00007FFD0864B000-memory.dmp
memory/2576-1-0x00007FFD08350000-0x00007FFD08D88000-memory.dmp
memory/2576-2-0x000000001C140000-0x000000001C60E000-memory.dmp
memory/2576-4-0x000000001C7C0000-0x000000001C822000-memory.dmp
memory/2576-5-0x000000001CE00000-0x000000001CED0000-memory.dmp
memory/2576-3-0x000000001C6B0000-0x000000001C74C000-memory.dmp
memory/2576-7-0x00007FFD08350000-0x00007FFD08D88000-memory.dmp
memory/2576-8-0x00007FFD08350000-0x00007FFD08D88000-memory.dmp
memory/2576-9-0x00007FFD08350000-0x00007FFD08D88000-memory.dmp
memory/2576-10-0x00000000014A0000-0x00000000014A8000-memory.dmp
memory/2576-11-0x00007FFD08350000-0x00007FFD08D88000-memory.dmp
memory/2576-12-0x00007FFD08350000-0x00007FFD08D88000-memory.dmp
memory/2576-13-0x00007FFD08350000-0x00007FFD08D88000-memory.dmp
memory/2576-14-0x00007FFD08350000-0x00007FFD08D88000-memory.dmp
memory/2576-15-0x00007FFD08350000-0x00007FFD08D88000-memory.dmp
memory/2576-16-0x00007FFD08350000-0x00007FFD08D88000-memory.dmp
memory/2576-17-0x00007FFD08350000-0x00007FFD08D88000-memory.dmp
memory/2576-18-0x00007FFD08350000-0x00007FFD08D88000-memory.dmp
memory/2576-19-0x00007FFD08350000-0x00007FFD08D88000-memory.dmp
memory/2576-20-0x00007FFD08350000-0x00007FFD08D88000-memory.dmp