Analysis
- max time kernel
149s - max time network
149s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260710-en - resource tags
- submitted
10/09/2026, 03:28
General
- Target jaffacakes118_Barbie.und.das.Geheimnis.von.Oceana.German.2009.DL.PAL.DVDR-MostWanted.exe
- Size 833KB
- Sample260910-d1b4cawbme
- SHA256 c6150a5d410a72b63462f7569e318180e25c1f26c19f0ccf8b4fd31679f76c89
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 7 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Barbie.und.das.Geheimnis.von.Oceana.German.2009.DL.PAL.DVDR-MostWanted.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Barbie.und.das.Geheimnis.von.Oceana.German.2009.DL.PAL.DVDR-MostWanted.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/5056-0-0x00007FFA3131A000-0x00007FFA3131B000-memory.dmp
memory/5056-1-0x00007FFA31020000-0x00007FFA31A58000-memory.dmp
memory/5056-3-0x000000001BC20000-0x000000001BCBC000-memory.dmp
memory/5056-4-0x000000001BD30000-0x000000001BD92000-memory.dmp
memory/5056-2-0x000000001B6B0000-0x000000001BB7E000-memory.dmp
memory/5056-6-0x000000001C270000-0x000000001C340000-memory.dmp
memory/5056-5-0x00007FFA31020000-0x00007FFA31A58000-memory.dmp
memory/5056-8-0x00007FFA31020000-0x00007FFA31A58000-memory.dmp
memory/5056-9-0x00007FFA31020000-0x00007FFA31A58000-memory.dmp
memory/5056-10-0x0000000002350000-0x0000000002358000-memory.dmp
memory/5056-11-0x00007FFA31020000-0x00007FFA31A58000-memory.dmp
memory/5056-12-0x00007FFA31020000-0x00007FFA31A58000-memory.dmp
memory/5056-13-0x00007FFA31020000-0x00007FFA31A58000-memory.dmp
memory/5056-14-0x00007FFA31020000-0x00007FFA31A58000-memory.dmp
memory/5056-15-0x00007FFA31020000-0x00007FFA31A58000-memory.dmp
memory/5056-16-0x00007FFA31020000-0x00007FFA31A58000-memory.dmp
memory/5056-17-0x00007FFA31020000-0x00007FFA31A58000-memory.dmp
memory/5056-18-0x00007FFA31020000-0x00007FFA31A58000-memory.dmp
memory/5056-19-0x00007FFA31020000-0x00007FFA31A58000-memory.dmp
memory/5056-20-0x00007FFA31020000-0x00007FFA31A58000-memory.dmp
memory/5056-21-0x00007FFA31020000-0x00007FFA31A58000-memory.dmp
memory/5056-22-0x00007FFA31020000-0x00007FFA31A58000-memory.dmp
memory/5056-23-0x00007FFA31020000-0x00007FFA31A58000-memory.dmp