Analysis
- max time kernel
149s - max time network
143s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
10/09/2026, 03:24
General
- Target jaffacakes118_The Blueprint Decoded.exe
- Size 3.3MB
- Sample260910-dx2vlawaqa
- SHA256 e3428d7e26fc22d1c4ef6710e50d9ee881dc895175fd398a34a0716de40e5b28
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 5 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_The Blueprint Decoded.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_The Blueprint Decoded.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/5648-0-0x00007FFB7C68A000-0x00007FFB7C68B000-memory.dmp
memory/5648-1-0x00007FFB7C390000-0x00007FFB7CDC8000-memory.dmp
memory/5648-3-0x000000001BBF0000-0x000000001C0BE000-memory.dmp
memory/5648-2-0x00007FFB7C390000-0x00007FFB7CDC8000-memory.dmp
memory/5648-4-0x000000001C160000-0x000000001C1FC000-memory.dmp
memory/5648-5-0x000000001C270000-0x000000001C2D2000-memory.dmp
memory/5648-6-0x000000001C7B0000-0x000000001C880000-memory.dmp
memory/5648-8-0x00007FFB7C390000-0x00007FFB7CDC8000-memory.dmp
memory/5648-9-0x00007FFB7C390000-0x00007FFB7CDC8000-memory.dmp
memory/5648-10-0x00007FFB7C390000-0x00007FFB7CDC8000-memory.dmp
memory/5648-11-0x00007FFB7C390000-0x00007FFB7CDC8000-memory.dmp
memory/5648-12-0x00000000010E0000-0x00000000010E8000-memory.dmp
memory/5648-13-0x00007FFB7C390000-0x00007FFB7CDC8000-memory.dmp
memory/5648-14-0x00007FFB7C390000-0x00007FFB7CDC8000-memory.dmp
memory/5648-15-0x00007FFB7C390000-0x00007FFB7CDC8000-memory.dmp
memory/5648-16-0x00007FFB7C390000-0x00007FFB7CDC8000-memory.dmp
memory/5648-17-0x00007FFB7C390000-0x00007FFB7CDC8000-memory.dmp
memory/5648-18-0x00007FFB7C390000-0x00007FFB7CDC8000-memory.dmp
memory/5648-19-0x00007FFB7C390000-0x00007FFB7CDC8000-memory.dmp
memory/5648-20-0x00007FFB7C390000-0x00007FFB7CDC8000-memory.dmp