Analysis
- max time kernel
149s - max time network
150s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
- submitted
10/09/2026, 04:42
General
- Target jaffacakes118_City.of.Ember.Flucht.aus.der.Dunkelheit.German.DL.2008.PAL.DVDR-CRiTiCAL _mirror_.exe
- Size 6.7MB
- Sample260910-fb3acagk6v
- SHA256 911a9bf70315eb43671b6cc41939308eb622e26a89186c117736744b927bc33e
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 9 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_City.of.Ember.Flucht.aus.der.Dunkelheit.German.DL.2008.PAL.DVDR-CRiTiCAL _mirror_.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_City.of.Ember.Flucht.aus.der.Dunkelheit.German.DL.2008.PAL.DVDR-CRiTiCAL _mirror_.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3212-0-0x00007FFB60AD5000-0x00007FFB60AD6000-memory.dmp
memory/3212-1-0x00007FFB60820000-0x00007FFB611C1000-memory.dmp
memory/3212-2-0x00007FFB60820000-0x00007FFB611C1000-memory.dmp
memory/3212-3-0x000000001C240000-0x000000001C70E000-memory.dmp
memory/3212-4-0x000000001C7B0000-0x000000001C84C000-memory.dmp
memory/3212-5-0x000000001C8C0000-0x000000001C922000-memory.dmp
memory/3212-6-0x000000001CE00000-0x000000001CED0000-memory.dmp
memory/3212-8-0x00007FFB60820000-0x00007FFB611C1000-memory.dmp
memory/3212-9-0x00007FFB60820000-0x00007FFB611C1000-memory.dmp
memory/3212-12-0x00007FFB60820000-0x00007FFB611C1000-memory.dmp
memory/3212-11-0x00007FFB60820000-0x00007FFB611C1000-memory.dmp
memory/3212-10-0x000000001BC10000-0x000000001BC18000-memory.dmp
memory/3212-13-0x00007FFB60820000-0x00007FFB611C1000-memory.dmp
memory/3212-14-0x00007FFB60820000-0x00007FFB611C1000-memory.dmp
memory/3212-15-0x00007FFB60820000-0x00007FFB611C1000-memory.dmp
memory/3212-16-0x00007FFB60820000-0x00007FFB611C1000-memory.dmp
memory/3212-17-0x00007FFB60820000-0x00007FFB611C1000-memory.dmp
memory/3212-18-0x00007FFB60820000-0x00007FFB611C1000-memory.dmp
memory/3212-19-0x00007FFB60820000-0x00007FFB611C1000-memory.dmp
memory/3212-21-0x00007FFB60820000-0x00007FFB611C1000-memory.dmp