Analysis
- max time kernel
148s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
10/09/2026, 04:08
General
- Target jaffacakes118_Haufe.Finance.Office.Professional.v7.3.Stand.Oktober.2009.German-BLZiSO.exe
- Size 1.1MB
- Sample260910-eqgrhsy1ev
- SHA256 39eea447aef911b7e3f44f74c0396e324af32956ebbf6483adea5b839903541e
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 7 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Haufe.Finance.Office.Professional.v7.3.Stand.Oktober.2009.German-BLZiSO.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Haufe.Finance.Office.Professional.v7.3.Stand.Oktober.2009.German-BLZiSO.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/5220-0-0x00007FF88E43A000-0x00007FF88E43B000-memory.dmp
memory/5220-1-0x00007FF88E140000-0x00007FF88EB78000-memory.dmp
memory/5220-5-0x000000001CCC0000-0x000000001CD22000-memory.dmp
memory/5220-4-0x000000001CBB0000-0x000000001CC4C000-memory.dmp
memory/5220-3-0x000000001C640000-0x000000001CB0E000-memory.dmp
memory/5220-6-0x000000001D200000-0x000000001D2D0000-memory.dmp
memory/5220-2-0x00007FF88E140000-0x00007FF88EB78000-memory.dmp
memory/5220-8-0x00007FF88E140000-0x00007FF88EB78000-memory.dmp
memory/5220-9-0x00007FF88E140000-0x00007FF88EB78000-memory.dmp
memory/5220-10-0x00007FF88E140000-0x00007FF88EB78000-memory.dmp
memory/5220-11-0x00007FF88E140000-0x00007FF88EB78000-memory.dmp
memory/5220-12-0x00007FF88E140000-0x00007FF88EB78000-memory.dmp
memory/5220-13-0x00007FF88E140000-0x00007FF88EB78000-memory.dmp
memory/5220-14-0x00000000018C0000-0x00000000018C8000-memory.dmp
memory/5220-15-0x00007FF88E140000-0x00007FF88EB78000-memory.dmp
memory/5220-16-0x00007FF88E140000-0x00007FF88EB78000-memory.dmp
memory/5220-17-0x00007FF88E140000-0x00007FF88EB78000-memory.dmp
memory/5220-18-0x00007FF88E140000-0x00007FF88EB78000-memory.dmp
memory/5220-19-0x00007FF88E140000-0x00007FF88EB78000-memory.dmp
memory/5220-20-0x00007FF88E140000-0x00007FF88EB78000-memory.dmp
memory/5220-21-0x00007FF88E140000-0x00007FF88EB78000-memory.dmp
memory/5220-22-0x00007FF88E140000-0x00007FF88EB78000-memory.dmp
memory/5220-23-0x00007FF88E140000-0x00007FF88EB78000-memory.dmp