Analysis
- max time kernel
149s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
10/09/2026, 04:23
General
- Target jaffacakes118_Der unbekannte Geliebte (1946).exe
- Size 6.0MB
- Sample260910-ez95esxene
- SHA256 6d2a3a394b46499af04cef64d0ca1b90357a4373cdc9356d7605fbd5f21d743f
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 7 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Der unbekannte Geliebte (1946).exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Der unbekannte Geliebte (1946).exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/5972-0-0x00007FF8B42AA000-0x00007FF8B42AB000-memory.dmp
memory/5972-1-0x00007FF8B3FB0000-0x00007FF8B49E8000-memory.dmp
memory/5972-2-0x000000001CE60000-0x000000001D32E000-memory.dmp
memory/5972-4-0x000000001D4E0000-0x000000001D542000-memory.dmp
memory/5972-3-0x000000001D3D0000-0x000000001D46C000-memory.dmp
memory/5972-5-0x000000001DA20000-0x000000001DAF0000-memory.dmp
memory/5972-7-0x00007FF8B3FB0000-0x00007FF8B49E8000-memory.dmp
memory/5972-8-0x00007FF8B3FB0000-0x00007FF8B49E8000-memory.dmp
memory/5972-9-0x00007FF8B3FB0000-0x00007FF8B49E8000-memory.dmp
memory/5972-10-0x00007FF8B3FB0000-0x00007FF8B49E8000-memory.dmp
memory/5972-11-0x0000000001810000-0x0000000001818000-memory.dmp
memory/5972-12-0x00007FF8B3FB0000-0x00007FF8B49E8000-memory.dmp
memory/5972-13-0x00007FF8B3FB0000-0x00007FF8B49E8000-memory.dmp
memory/5972-14-0x00007FF8B3FB0000-0x00007FF8B49E8000-memory.dmp
memory/5972-15-0x00007FF8B3FB0000-0x00007FF8B49E8000-memory.dmp
memory/5972-16-0x00007FF8B3FB0000-0x00007FF8B49E8000-memory.dmp
memory/5972-17-0x00007FF8B3FB0000-0x00007FF8B49E8000-memory.dmp
memory/5972-18-0x00007FF8B3FB0000-0x00007FF8B49E8000-memory.dmp
memory/5972-19-0x00007FF8B3FB0000-0x00007FF8B49E8000-memory.dmp
memory/5972-20-0x00007FF8B3FB0000-0x00007FF8B49E8000-memory.dmp
memory/5972-21-0x00007FF8B3FB0000-0x00007FF8B49E8000-memory.dmp
memory/5972-22-0x00007FF8B3FB0000-0x00007FF8B49E8000-memory.dmp
memory/5972-23-0x00007FF8B3FB0000-0x00007FF8B49E8000-memory.dmp
memory/5972-24-0x00007FF8B3FB0000-0x00007FF8B49E8000-memory.dmp
memory/5972-25-0x00007FF8B3FB0000-0x00007FF8B49E8000-memory.dmp