Analysis
- max time kernel
149s - max time network
151s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
- submitted
10/09/2026, 04:34
General
- Target jaffacakes118_Galileo.Design.Das.Praxis-Training.Final.Cut.Pro.6.German.DVD9-RESTORE.exe
- Size 6.9MB
- Sample260910-e7kjqsgj2s
- SHA256 9b8b2348c150f6558da664c6adbc3b523c998538cba0b681e1e134f34b71c185
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 7 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Galileo.Design.Das.Praxis-Training.Final.Cut.Pro.6.German.DVD9-RESTORE.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Galileo.Design.Das.Praxis-Training.Final.Cut.Pro.6.German.DVD9-RESTORE.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1700-0-0x00007FFF410B5000-0x00007FFF410B6000-memory.dmp
memory/1700-1-0x00007FFF40E00000-0x00007FFF417A1000-memory.dmp
memory/1700-2-0x00007FFF40E00000-0x00007FFF417A1000-memory.dmp
memory/1700-3-0x000000001C500000-0x000000001C9CE000-memory.dmp
memory/1700-4-0x00007FFF40E00000-0x00007FFF417A1000-memory.dmp
memory/1700-6-0x000000001CB80000-0x000000001CBE2000-memory.dmp
memory/1700-5-0x000000001CA70000-0x000000001CB0C000-memory.dmp
memory/1700-7-0x000000001D0C0000-0x000000001D190000-memory.dmp
memory/1700-9-0x00007FFF40E00000-0x00007FFF417A1000-memory.dmp
memory/1700-10-0x00007FFF40E00000-0x00007FFF417A1000-memory.dmp
memory/1700-11-0x00007FFF40E00000-0x00007FFF417A1000-memory.dmp
memory/1700-12-0x00007FFF40E00000-0x00007FFF417A1000-memory.dmp
memory/1700-13-0x00007FFF40E00000-0x00007FFF417A1000-memory.dmp
memory/1700-16-0x000000001BED0000-0x000000001BED8000-memory.dmp
memory/1700-15-0x00007FFF40E00000-0x00007FFF417A1000-memory.dmp
memory/1700-14-0x00007FFF40E00000-0x00007FFF417A1000-memory.dmp
memory/1700-17-0x00007FFF40E00000-0x00007FFF417A1000-memory.dmp
memory/1700-18-0x00007FFF40E00000-0x00007FFF417A1000-memory.dmp
memory/1700-19-0x00007FFF40E00000-0x00007FFF417A1000-memory.dmp
memory/1700-20-0x00007FFF40E00000-0x00007FFF417A1000-memory.dmp
memory/1700-21-0x00007FFF40E00000-0x00007FFF417A1000-memory.dmp
memory/1700-22-0x00007FFF40E00000-0x00007FFF417A1000-memory.dmp
memory/1700-23-0x00007FFF40E00000-0x00007FFF417A1000-memory.dmp
memory/1700-24-0x00007FFF40E00000-0x00007FFF417A1000-memory.dmp
memory/1700-25-0x00007FFF40E00000-0x00007FFF417A1000-memory.dmp
memory/1700-27-0x00007FFF40E00000-0x00007FFF417A1000-memory.dmp