Analysis
- max time kernel
149s - max time network
144s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
- submitted
10/09/2026, 04:43
General
- Target jaffacakes118_Galileo.Computing.Visual.C.2008.GERMAN-Substance.exe
- Size 5.6MB
- Sample260910-fb9pesyale
- SHA256 411df274366c8291a92a5f0db42a04b0b02a01389e2207f6e316c688f6664268
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 7 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Galileo.Computing.Visual.C.2008.GERMAN-Substance.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Galileo.Computing.Visual.C.2008.GERMAN-Substance.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1764-0-0x00007FFBE2F35000-0x00007FFBE2F36000-memory.dmp
memory/1764-1-0x00007FFBE2C80000-0x00007FFBE3621000-memory.dmp
memory/1764-2-0x000000001C190000-0x000000001C65E000-memory.dmp
memory/1764-4-0x00007FFBE2C80000-0x00007FFBE3621000-memory.dmp
memory/1764-3-0x000000001C700000-0x000000001C79C000-memory.dmp
memory/1764-5-0x000000001C810000-0x000000001C872000-memory.dmp
memory/1764-6-0x000000001CD50000-0x000000001CE20000-memory.dmp
memory/1764-8-0x00007FFBE2C80000-0x00007FFBE3621000-memory.dmp
memory/1764-9-0x00007FFBE2C80000-0x00007FFBE3621000-memory.dmp
memory/1764-10-0x00007FFBE2C80000-0x00007FFBE3621000-memory.dmp
memory/1764-11-0x00007FFBE2C80000-0x00007FFBE3621000-memory.dmp
memory/1764-12-0x00007FFBE2C80000-0x00007FFBE3621000-memory.dmp
memory/1764-13-0x0000000001790000-0x0000000001798000-memory.dmp
memory/1764-14-0x00007FFBE2C80000-0x00007FFBE3621000-memory.dmp
memory/1764-15-0x00007FFBE2C80000-0x00007FFBE3621000-memory.dmp
memory/1764-16-0x00007FFBE2C80000-0x00007FFBE3621000-memory.dmp
memory/1764-17-0x00007FFBE2C80000-0x00007FFBE3621000-memory.dmp
memory/1764-18-0x00007FFBE2C80000-0x00007FFBE3621000-memory.dmp
memory/1764-19-0x00007FFBE2C80000-0x00007FFBE3621000-memory.dmp
memory/1764-20-0x00007FFBE2C80000-0x00007FFBE3621000-memory.dmp
memory/1764-22-0x00007FFBE2C80000-0x00007FFBE3621000-memory.dmp