Analysis
- max time kernel
148s - max time network
142s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260710-en - resource tags
- submitted
10/09/2026, 03:38
General
- Target jaffacakes118_Barbie.Mariposa.und.ihre.Freundinnen.die.Schmetterlingsfeen.German.2008.DL.PAL.DVDR-ETM.exe
- Size 5.4MB
- Sample260910-d65mvaysht
- SHA256 0171d8ad686690abe0638f69c70876ab7f03ed05ccf4888a04555e7638b207e5
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 5 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Barbie.Mariposa.und.ihre.Freundinnen.die.Schmetterlingsfeen.German.2008.DL.PAL.DVDR-ETM.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Barbie.Mariposa.und.ihre.Freundinnen.die.Schmetterlingsfeen.German.2008.DL.PAL.DVDR-ETM.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1168-0-0x00007FFEE27CA000-0x00007FFEE27CB000-memory.dmp
memory/1168-2-0x000000001BC60000-0x000000001C12E000-memory.dmp
memory/1168-1-0x00007FFEE24D0000-0x00007FFEE2F08000-memory.dmp
memory/1168-3-0x000000001C1D0000-0x000000001C26C000-memory.dmp
memory/1168-4-0x000000001C2E0000-0x000000001C342000-memory.dmp
memory/1168-5-0x000000001C820000-0x000000001C8F0000-memory.dmp
memory/1168-7-0x00007FFEE24D0000-0x00007FFEE2F08000-memory.dmp
memory/1168-9-0x00007FFEE24D0000-0x00007FFEE2F08000-memory.dmp
memory/1168-8-0x0000000001150000-0x0000000001158000-memory.dmp
memory/1168-10-0x00007FFEE24D0000-0x00007FFEE2F08000-memory.dmp
memory/1168-11-0x00007FFEE24D0000-0x00007FFEE2F08000-memory.dmp
memory/1168-12-0x00007FFEE24D0000-0x00007FFEE2F08000-memory.dmp
memory/1168-13-0x00007FFEE24D0000-0x00007FFEE2F08000-memory.dmp
memory/1168-14-0x00007FFEE24D0000-0x00007FFEE2F08000-memory.dmp
memory/1168-15-0x00007FFEE24D0000-0x00007FFEE2F08000-memory.dmp