Analysis
- max time kernel
149s - max time network
138s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
10/09/2026, 05:03
General
- Target jaffacakes118_Haufe.SteuerOffice.Fuer.Betriebe.v4.3.Stand.Juni.2009.READ.NFO.GERMAN.ISO-TBE.exe
- Size 1.5MB
- Sample260910-fp27hayena
- SHA256 73227d008d49567ce2ca9d081c9f3dd96a034ca31c871f0beae2dd716a067688
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 5 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Haufe.SteuerOffice.Fuer.Betriebe.v4.3.Stand.Juni.2009.READ.NFO.GERMAN.ISO-TBE.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Haufe.SteuerOffice.Fuer.Betriebe.v4.3.Stand.Juni.2009.READ.NFO.GERMAN.ISO-TBE.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/5068-0-0x00007FFC1C75A000-0x00007FFC1C75B000-memory.dmp
memory/5068-1-0x00007FFC1C460000-0x00007FFC1CE98000-memory.dmp
memory/5068-2-0x000000001C370000-0x000000001C83E000-memory.dmp
memory/5068-4-0x00007FFC1C460000-0x00007FFC1CE98000-memory.dmp
memory/5068-3-0x000000001C8E0000-0x000000001C97C000-memory.dmp
memory/5068-5-0x000000001C9F0000-0x000000001CA52000-memory.dmp
memory/5068-8-0x00007FFC1C460000-0x00007FFC1CE98000-memory.dmp
memory/5068-6-0x000000001CF30000-0x000000001D000000-memory.dmp
memory/5068-9-0x00007FFC1C460000-0x00007FFC1CE98000-memory.dmp
memory/5068-10-0x00007FFC1C460000-0x00007FFC1CE98000-memory.dmp
memory/5068-11-0x00007FFC1C460000-0x00007FFC1CE98000-memory.dmp
memory/5068-12-0x0000000001750000-0x0000000001758000-memory.dmp
memory/5068-13-0x00007FFC1C460000-0x00007FFC1CE98000-memory.dmp
memory/5068-14-0x00007FFC1C460000-0x00007FFC1CE98000-memory.dmp
memory/5068-15-0x00007FFC1C460000-0x00007FFC1CE98000-memory.dmp
memory/5068-16-0x00007FFC1C460000-0x00007FFC1CE98000-memory.dmp
memory/5068-17-0x00007FFC1C460000-0x00007FFC1CE98000-memory.dmp
memory/5068-18-0x00007FFC1C460000-0x00007FFC1CE98000-memory.dmp
memory/5068-19-0x00007FFC1C460000-0x00007FFC1CE98000-memory.dmp
memory/5068-20-0x00007FFC1C460000-0x00007FFC1CE98000-memory.dmp
memory/5068-21-0x00007FFC1C460000-0x00007FFC1CE98000-memory.dmp