Analysis
- max time kernel
150s - max time network
147s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
- submitted
10/09/2026, 03:29
General
- Target jaffacakes118_Arthur.und.die.Minimoys.2.TS.MD.German.MERRY.XMAS.XViD-AOE _mirror_.exe
- Size 4.4MB
- Sample260910-d2c22ax1bv
- SHA256 92119dd5cdad6f1f85de7587919090574a41d132e09372f0f74cf0fd09fc0397
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 5 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Arthur.und.die.Minimoys.2.TS.MD.German.MERRY.XMAS.XViD-AOE _mirror_.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Arthur.und.die.Minimoys.2.TS.MD.German.MERRY.XMAS.XViD-AOE _mirror_.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3492-0-0x00007FF8016D5000-0x00007FF8016D6000-memory.dmp
memory/3492-1-0x00007FF801420000-0x00007FF801DC1000-memory.dmp
memory/3492-2-0x00007FF801420000-0x00007FF801DC1000-memory.dmp
memory/3492-3-0x000000001B7C0000-0x000000001BC8E000-memory.dmp
memory/3492-4-0x000000001BD30000-0x000000001BDCC000-memory.dmp
memory/3492-5-0x000000001BE40000-0x000000001BEA2000-memory.dmp
memory/3492-6-0x000000001C380000-0x000000001C450000-memory.dmp
memory/3492-8-0x00007FF801420000-0x00007FF801DC1000-memory.dmp
memory/3492-9-0x00007FF801420000-0x00007FF801DC1000-memory.dmp
memory/3492-10-0x0000000000CC0000-0x0000000000CC8000-memory.dmp
memory/3492-11-0x00007FF801420000-0x00007FF801DC1000-memory.dmp
memory/3492-12-0x00007FF801420000-0x00007FF801DC1000-memory.dmp
memory/3492-13-0x00007FF801420000-0x00007FF801DC1000-memory.dmp
memory/3492-14-0x00007FF801420000-0x00007FF801DC1000-memory.dmp
memory/3492-15-0x00007FF801420000-0x00007FF801DC1000-memory.dmp
memory/3492-16-0x00007FF801420000-0x00007FF801DC1000-memory.dmp
memory/3492-17-0x00007FF801420000-0x00007FF801DC1000-memory.dmp
memory/3492-18-0x00007FF801420000-0x00007FF801DC1000-memory.dmp
memory/3492-20-0x00007FF801420000-0x00007FF801DC1000-memory.dmp