Analysis

  • max time kernel
    148s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    10/09/2026, 05:02

General

  • Target
    jaffacakes118_Ein.Einhalb.Ritter.2008.German.HDRip.AC3.Xvid.Chefflo _mirror_.exe
  • Size 7.8MB
  • Sample260910-fn8yna1vcw
  • SHA256 df9ebec81a28574047c03331b22838a4f206ccf1266e3fc99e844d302ed72034
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 7 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Ein.Einhalb.Ritter.2008.German.HDRip.AC3.Xvid.Chefflo _mirror_.exe
    "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Ein.Einhalb.Ritter.2008.German.HDRip.AC3.Xvid.Chefflo _mirror_.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:3480

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        memory/3480-0-0x00007FFEBECE5000-0x00007FFEBECE6000-memory.dmp

        memory/3480-1-0x00007FFEBEA30000-0x00007FFEBF3D1000-memory.dmp

        memory/3480-2-0x00007FFEBEA30000-0x00007FFEBF3D1000-memory.dmp

        memory/3480-4-0x000000001B9A0000-0x000000001BE6E000-memory.dmp

        memory/3480-5-0x000000001BF10000-0x000000001BFAC000-memory.dmp

        memory/3480-7-0x00007FFEBEA30000-0x00007FFEBF3D1000-memory.dmp

        memory/3480-6-0x000000001C020000-0x000000001C082000-memory.dmp

        memory/3480-8-0x000000001C560000-0x000000001C630000-memory.dmp

        memory/3480-3-0x00007FFEBEA30000-0x00007FFEBF3D1000-memory.dmp

        memory/3480-10-0x00007FFEBEA30000-0x00007FFEBF3D1000-memory.dmp

        memory/3480-11-0x00007FFEBEA30000-0x00007FFEBF3D1000-memory.dmp

        memory/3480-12-0x00007FFEBEA30000-0x00007FFEBF3D1000-memory.dmp

        memory/3480-13-0x00007FFEBEA30000-0x00007FFEBF3D1000-memory.dmp

        memory/3480-14-0x00007FFEBEA30000-0x00007FFEBF3D1000-memory.dmp

        memory/3480-15-0x00007FFEBEA30000-0x00007FFEBF3D1000-memory.dmp

        memory/3480-16-0x00007FFEBEA30000-0x00007FFEBF3D1000-memory.dmp

        memory/3480-17-0x00007FFEBEA30000-0x00007FFEBF3D1000-memory.dmp

        memory/3480-19-0x0000000000D30000-0x0000000000D38000-memory.dmp

        memory/3480-20-0x00007FFEBEA30000-0x00007FFEBF3D1000-memory.dmp

        memory/3480-18-0x00007FFEBEA30000-0x00007FFEBF3D1000-memory.dmp

        memory/3480-21-0x00007FFEBEA30000-0x00007FFEBF3D1000-memory.dmp

        memory/3480-22-0x00007FFEBEA30000-0x00007FFEBF3D1000-memory.dmp

        memory/3480-23-0x00007FFEBEA30000-0x00007FFEBF3D1000-memory.dmp

        memory/3480-24-0x00007FFEBEA30000-0x00007FFEBF3D1000-memory.dmp

        memory/3480-25-0x00007FFEBEA30000-0x00007FFEBF3D1000-memory.dmp

        memory/3480-27-0x00007FFEBEA30000-0x00007FFEBF3D1000-memory.dmp