Analysis
- max time kernel
148s - max time network
150s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
10/09/2026, 04:43
General
- Target jaffacakes118_Galileo.Computing.Visual.C.2008.GERMAN-Substance.exe
- Size 5.6MB
- Sample260910-fb9pesyale
- SHA256 411df274366c8291a92a5f0db42a04b0b02a01389e2207f6e316c688f6664268
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 7 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Galileo.Computing.Visual.C.2008.GERMAN-Substance.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Galileo.Computing.Visual.C.2008.GERMAN-Substance.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3300-0-0x00007FFEB78FA000-0x00007FFEB78FB000-memory.dmp
memory/3300-1-0x00007FFEB7600000-0x00007FFEB8038000-memory.dmp
memory/3300-2-0x00007FFEB7600000-0x00007FFEB8038000-memory.dmp
memory/3300-3-0x00007FFEB7600000-0x00007FFEB8038000-memory.dmp
memory/3300-4-0x000000001B900000-0x000000001BDCE000-memory.dmp
memory/3300-5-0x00007FFEB7600000-0x00007FFEB8038000-memory.dmp
memory/3300-7-0x000000001BF80000-0x000000001BFE2000-memory.dmp
memory/3300-6-0x000000001BE70000-0x000000001BF0C000-memory.dmp
memory/3300-8-0x000000001C4C0000-0x000000001C590000-memory.dmp
memory/3300-10-0x00007FFEB7600000-0x00007FFEB8038000-memory.dmp
memory/3300-11-0x00007FFEB7600000-0x00007FFEB8038000-memory.dmp
memory/3300-12-0x00007FFEB7600000-0x00007FFEB8038000-memory.dmp
memory/3300-13-0x0000000000CF0000-0x0000000000CF8000-memory.dmp
memory/3300-14-0x00007FFEB7600000-0x00007FFEB8038000-memory.dmp
memory/3300-15-0x00007FFEB7600000-0x00007FFEB8038000-memory.dmp
memory/3300-16-0x00007FFEB7600000-0x00007FFEB8038000-memory.dmp
memory/3300-17-0x00007FFEB7600000-0x00007FFEB8038000-memory.dmp
memory/3300-18-0x00007FFEB7600000-0x00007FFEB8038000-memory.dmp
memory/3300-19-0x00007FFEB7600000-0x00007FFEB8038000-memory.dmp