Analysis
- max time kernel
148s - max time network
143s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
10/09/2026, 05:02
General
- Target jaffacakes118_Der.Knast.Schwerverbrecher.am.Limit.S01E05.Alaska.Spring.Creek.Rikers.Island.GERMAN.DO.exe
- Size 3.6MB
- Sample260910-fphsvsgp6w
- SHA256 bb46b29d3b4fb6dfab7ac4a8a38ea8a7c1cdad8d0b21ca46813efaedcbdb7c6a
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 7 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Der.Knast.Schwerverbrecher.am.Limit.S01E05.Alaska.Spring.Creek.Rikers.Island.GERMAN.DO.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Der.Knast.Schwerverbrecher.am.Limit.S01E05.Alaska.Spring.Creek.Rikers.Island.GERMAN.DO.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1132-0-0x00007FFA850EA000-0x00007FFA850EB000-memory.dmp
memory/1132-1-0x00007FFA84DF0000-0x00007FFA85828000-memory.dmp
memory/1132-2-0x00007FFA84DF0000-0x00007FFA85828000-memory.dmp
memory/1132-3-0x000000001C4B0000-0x000000001C97E000-memory.dmp
memory/1132-5-0x000000001CA20000-0x000000001CABC000-memory.dmp
memory/1132-4-0x00007FFA84DF0000-0x00007FFA85828000-memory.dmp
memory/1132-6-0x000000001CB30000-0x000000001CB92000-memory.dmp
memory/1132-8-0x000000001D070000-0x000000001D140000-memory.dmp
memory/1132-7-0x00007FFA84DF0000-0x00007FFA85828000-memory.dmp
memory/1132-10-0x00007FFA84DF0000-0x00007FFA85828000-memory.dmp
memory/1132-11-0x00007FFA84DF0000-0x00007FFA85828000-memory.dmp
memory/1132-12-0x00007FFA84DF0000-0x00007FFA85828000-memory.dmp
memory/1132-13-0x0000000001A90000-0x0000000001A98000-memory.dmp
memory/1132-14-0x00007FFA84DF0000-0x00007FFA85828000-memory.dmp
memory/1132-15-0x00007FFA84DF0000-0x00007FFA85828000-memory.dmp
memory/1132-16-0x00007FFA84DF0000-0x00007FFA85828000-memory.dmp
memory/1132-17-0x00007FFA84DF0000-0x00007FFA85828000-memory.dmp
memory/1132-18-0x00007FFA84DF0000-0x00007FFA85828000-memory.dmp
memory/1132-19-0x00007FFA84DF0000-0x00007FFA85828000-memory.dmp
memory/1132-20-0x00007FFA84DF0000-0x00007FFA85828000-memory.dmp
memory/1132-21-0x00007FFA84DF0000-0x00007FFA85828000-memory.dmp
memory/1132-22-0x00007FFA84DF0000-0x00007FFA85828000-memory.dmp