Analysis
- max time kernel
149s - max time network
144s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
10/09/2026, 03:29
General
- Target jaffacakes118_Galileo.Design.Das.Mac-Training.fuer.Windows-Umsteiger.German-RESTORE.exe
- Size 6.1MB
- Sample260910-d176sawbqc
- SHA256 b39f7b41513f6f4b9183a8de02c476f9eb6d335906ab21c56ad0cb419348ab26
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 5 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Galileo.Design.Das.Mac-Training.fuer.Windows-Umsteiger.German-RESTORE.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Galileo.Design.Das.Mac-Training.fuer.Windows-Umsteiger.German-RESTORE.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/884-0-0x00007FFFF8EFA000-0x00007FFFF8EFB000-memory.dmp
memory/884-1-0x00007FFFF8C00000-0x00007FFFF9638000-memory.dmp
memory/884-4-0x000000001BE80000-0x000000001BEE2000-memory.dmp
memory/884-5-0x000000001C3C0000-0x000000001C490000-memory.dmp
memory/884-3-0x000000001BD70000-0x000000001BE0C000-memory.dmp
memory/884-2-0x000000001B800000-0x000000001BCCE000-memory.dmp
memory/884-7-0x00007FFFF8C00000-0x00007FFFF9638000-memory.dmp
memory/884-8-0x00007FFFF8C00000-0x00007FFFF9638000-memory.dmp
memory/884-9-0x00007FFFF8C00000-0x00007FFFF9638000-memory.dmp
memory/884-10-0x00007FFFF8C00000-0x00007FFFF9638000-memory.dmp
memory/884-11-0x0000000000CF0000-0x0000000000CF8000-memory.dmp
memory/884-12-0x00007FFFF8C00000-0x00007FFFF9638000-memory.dmp
memory/884-13-0x00007FFFF8C00000-0x00007FFFF9638000-memory.dmp
memory/884-14-0x00007FFFF8C00000-0x00007FFFF9638000-memory.dmp
memory/884-15-0x00007FFFF8C00000-0x00007FFFF9638000-memory.dmp
memory/884-16-0x00007FFFF8C00000-0x00007FFFF9638000-memory.dmp
memory/884-17-0x00007FFFF8C00000-0x00007FFFF9638000-memory.dmp
memory/884-18-0x00007FFFF8C00000-0x00007FFFF9638000-memory.dmp
memory/884-19-0x00007FFFF8C00000-0x00007FFFF9638000-memory.dmp
memory/884-20-0x00007FFFF8C00000-0x00007FFFF9638000-memory.dmp
memory/884-21-0x00007FFFF8C00000-0x00007FFFF9638000-memory.dmp
memory/884-22-0x00007FFFF8C00000-0x00007FFFF9638000-memory.dmp