Analysis
- max time kernel
148s - max time network
150s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
10/09/2026, 04:58
General
- Target jaffacakes118_Dieter.Nuhr.Nuhr.die.Wahrheit.German.2009.PAL.DVDR-DF _mirror_.exe
- Size 962KB
- Sample260910-fl2rka1tcy
- SHA256 685684aa7008c9f5765c8d6fbbbdad387721cf44d54b0b519175139ce970a805
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 7 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Dieter.Nuhr.Nuhr.die.Wahrheit.German.2009.PAL.DVDR-DF _mirror_.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Dieter.Nuhr.Nuhr.die.Wahrheit.German.2009.PAL.DVDR-DF _mirror_.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4940-0-0x00007FFCE203A000-0x00007FFCE203B000-memory.dmp
memory/4940-3-0x000000001BAD0000-0x000000001BB6C000-memory.dmp
memory/4940-2-0x000000001B560000-0x000000001BA2E000-memory.dmp
memory/4940-1-0x00007FFCE1D40000-0x00007FFCE2778000-memory.dmp
memory/4940-4-0x000000001BBE0000-0x000000001BC42000-memory.dmp
memory/4940-5-0x000000001C120000-0x000000001C1F0000-memory.dmp
memory/4940-7-0x00007FFCE1D40000-0x00007FFCE2778000-memory.dmp
memory/4940-8-0x00007FFCE1D40000-0x00007FFCE2778000-memory.dmp
memory/4940-9-0x00007FFCE1D40000-0x00007FFCE2778000-memory.dmp
memory/4940-10-0x00007FFCE1D40000-0x00007FFCE2778000-memory.dmp
memory/4940-11-0x0000000000A60000-0x0000000000A68000-memory.dmp
memory/4940-12-0x00007FFCE1D40000-0x00007FFCE2778000-memory.dmp
memory/4940-13-0x00007FFCE1D40000-0x00007FFCE2778000-memory.dmp
memory/4940-14-0x00007FFCE1D40000-0x00007FFCE2778000-memory.dmp
memory/4940-15-0x00007FFCE1D40000-0x00007FFCE2778000-memory.dmp
memory/4940-16-0x00007FFCE1D40000-0x00007FFCE2778000-memory.dmp
memory/4940-17-0x00007FFCE1D40000-0x00007FFCE2778000-memory.dmp
memory/4940-18-0x00007FFCE1D40000-0x00007FFCE2778000-memory.dmp
memory/4940-19-0x00007FFCE1D40000-0x00007FFCE2778000-memory.dmp
memory/4940-20-0x00007FFCE1D40000-0x00007FFCE2778000-memory.dmp