Analysis
- max time kernel
149s - max time network
151s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
- submitted
10/09/2026, 03:04
General
- Target jaffacakes118_Galileo.Computing.Einstieg.in.Joomla.ab.v.1.5.GERMAN-RESTORE.exe
- Size 823KB
- Sample260910-dkpphadq9s
- SHA256 18041861d57d1b7e9cfbb1dbe95b454b330dcf90c7a1f2daf1e77877102c37dd
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 7 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Galileo.Computing.Einstieg.in.Joomla.ab.v.1.5.GERMAN-RESTORE.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Galileo.Computing.Einstieg.in.Joomla.ab.v.1.5.GERMAN-RESTORE.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1376-0-0x00007FFE0AC85000-0x00007FFE0AC86000-memory.dmp
memory/1376-1-0x00007FFE0A9D0000-0x00007FFE0B371000-memory.dmp
memory/1376-2-0x00007FFE0A9D0000-0x00007FFE0B371000-memory.dmp
memory/1376-3-0x000000001C240000-0x000000001C70E000-memory.dmp
memory/1376-4-0x00007FFE0A9D0000-0x00007FFE0B371000-memory.dmp
memory/1376-5-0x000000001C7B0000-0x000000001C84C000-memory.dmp
memory/1376-6-0x000000001C8C0000-0x000000001C922000-memory.dmp
memory/1376-7-0x000000001CE00000-0x000000001CED0000-memory.dmp
memory/1376-9-0x00007FFE0A9D0000-0x00007FFE0B371000-memory.dmp
memory/1376-11-0x0000000001610000-0x0000000001618000-memory.dmp
memory/1376-10-0x00007FFE0A9D0000-0x00007FFE0B371000-memory.dmp
memory/1376-12-0x00007FFE0A9D0000-0x00007FFE0B371000-memory.dmp
memory/1376-13-0x00007FFE0A9D0000-0x00007FFE0B371000-memory.dmp
memory/1376-14-0x00007FFE0A9D0000-0x00007FFE0B371000-memory.dmp
memory/1376-15-0x00007FFE0A9D0000-0x00007FFE0B371000-memory.dmp
memory/1376-16-0x00007FFE0A9D0000-0x00007FFE0B371000-memory.dmp
memory/1376-17-0x00007FFE0A9D0000-0x00007FFE0B371000-memory.dmp
memory/1376-18-0x00007FFE0A9D0000-0x00007FFE0B371000-memory.dmp
memory/1376-19-0x00007FFE0A9D0000-0x00007FFE0B371000-memory.dmp
memory/1376-20-0x00007FFE0A9D0000-0x00007FFE0B371000-memory.dmp
memory/1376-21-0x00007FFE0A9D0000-0x00007FFE0B371000-memory.dmp
memory/1376-23-0x00007FFE0A9D0000-0x00007FFE0B371000-memory.dmp