Analysis
- max time kernel
150s - max time network
136s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
10/09/2026, 03:29
General
- Target jaffacakes118_Arthur.und.die.Minimoys.2.TS.MD.German.MERRY.XMAS.XViD-AOE _mirror_.exe
- Size 4.4MB
- Sample260910-d2c22ax1bv
- SHA256 92119dd5cdad6f1f85de7587919090574a41d132e09372f0f74cf0fd09fc0397
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 7 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Arthur.und.die.Minimoys.2.TS.MD.German.MERRY.XMAS.XViD-AOE _mirror_.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Arthur.und.die.Minimoys.2.TS.MD.German.MERRY.XMAS.XViD-AOE _mirror_.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4284-0-0x00007FFA7986A000-0x00007FFA7986B000-memory.dmp
memory/4284-1-0x00007FFA79570000-0x00007FFA79FA8000-memory.dmp
memory/4284-3-0x000000001BE00000-0x000000001C2CE000-memory.dmp
memory/4284-2-0x00007FFA79570000-0x00007FFA79FA8000-memory.dmp
memory/4284-4-0x000000001C370000-0x000000001C40C000-memory.dmp
memory/4284-5-0x000000001C480000-0x000000001C4E2000-memory.dmp
memory/4284-6-0x000000001C9C0000-0x000000001CA90000-memory.dmp
memory/4284-8-0x00007FFA79570000-0x00007FFA79FA8000-memory.dmp
memory/4284-9-0x00007FFA79570000-0x00007FFA79FA8000-memory.dmp
memory/4284-10-0x00007FFA79570000-0x00007FFA79FA8000-memory.dmp
memory/4284-11-0x00007FFA79570000-0x00007FFA79FA8000-memory.dmp
memory/4284-12-0x0000000002B90000-0x0000000002B98000-memory.dmp
memory/4284-13-0x00007FFA79570000-0x00007FFA79FA8000-memory.dmp
memory/4284-14-0x00007FFA79570000-0x00007FFA79FA8000-memory.dmp
memory/4284-15-0x00007FFA79570000-0x00007FFA79FA8000-memory.dmp
memory/4284-16-0x00007FFA79570000-0x00007FFA79FA8000-memory.dmp
memory/4284-17-0x00007FFA79570000-0x00007FFA79FA8000-memory.dmp
memory/4284-18-0x00007FFA79570000-0x00007FFA79FA8000-memory.dmp
memory/4284-19-0x00007FFA79570000-0x00007FFA79FA8000-memory.dmp
memory/4284-20-0x00007FFA79570000-0x00007FFA79FA8000-memory.dmp
memory/4284-21-0x00007FFA79570000-0x00007FFA79FA8000-memory.dmp