Analysis
- max time kernel
150s - max time network
134s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
10/09/2026, 04:21
General
- Target jaffacakes118_Barbie.und.die.Musketiere.German.2009.ML.PAL.DVDR-QoM.exe
- Size 7.0MB
- Sample260910-eymbzaxdrb
- SHA256 88e089dc4c8e019eef3b3341063d8f7670779425f52ea7a4db8083e041c1e47a
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 7 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Barbie.und.die.Musketiere.German.2009.ML.PAL.DVDR-QoM.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Barbie.und.die.Musketiere.German.2009.ML.PAL.DVDR-QoM.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/5276-0-0x00007FFEC882A000-0x00007FFEC882B000-memory.dmp
memory/5276-1-0x00007FFEC8530000-0x00007FFEC8F68000-memory.dmp
memory/5276-5-0x00007FFEC8530000-0x00007FFEC8F68000-memory.dmp
memory/5276-4-0x0000000001590000-0x00000000015F2000-memory.dmp
memory/5276-6-0x000000001C3A0000-0x000000001C470000-memory.dmp
memory/5276-3-0x000000001BE30000-0x000000001BECC000-memory.dmp
memory/5276-2-0x000000001B8C0000-0x000000001BD8E000-memory.dmp
memory/5276-8-0x00007FFEC8530000-0x00007FFEC8F68000-memory.dmp
memory/5276-9-0x00007FFEC8530000-0x00007FFEC8F68000-memory.dmp
memory/5276-10-0x00007FFEC8530000-0x00007FFEC8F68000-memory.dmp
memory/5276-11-0x00007FFEC8530000-0x00007FFEC8F68000-memory.dmp
memory/5276-12-0x00007FFEC8530000-0x00007FFEC8F68000-memory.dmp
memory/5276-13-0x00007FFEC8530000-0x00007FFEC8F68000-memory.dmp
memory/5276-15-0x0000000000BA0000-0x0000000000BA8000-memory.dmp
memory/5276-16-0x00007FFEC8530000-0x00007FFEC8F68000-memory.dmp
memory/5276-14-0x00007FFEC8530000-0x00007FFEC8F68000-memory.dmp
memory/5276-17-0x00007FFEC8530000-0x00007FFEC8F68000-memory.dmp
memory/5276-18-0x00007FFEC8530000-0x00007FFEC8F68000-memory.dmp
memory/5276-19-0x00007FFEC8530000-0x00007FFEC8F68000-memory.dmp
memory/5276-20-0x00007FFEC8530000-0x00007FFEC8F68000-memory.dmp