Analysis
- max time kernel
149s - max time network
151s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
- submitted
10/09/2026, 03:11
General
- Target jaffacakes118_Ice.Age.3.TS.LD.Deutsch.XviD-Duplo _mirror_.exe
- Size 5.9MB
- Sample260910-dpv23sdr9w
- SHA256 6cc3d04fe37cc7d2ba0dce6753d9c4ee46452f6659fb1214f9a178b050177c86
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 7 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Ice.Age.3.TS.LD.Deutsch.XviD-Duplo _mirror_.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Ice.Age.3.TS.LD.Deutsch.XviD-Duplo _mirror_.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2560-0-0x00007FF91CB55000-0x00007FF91CB56000-memory.dmp
memory/2560-1-0x00007FF91C8A0000-0x00007FF91D241000-memory.dmp
memory/2560-3-0x000000001B7E0000-0x000000001BCAE000-memory.dmp
memory/2560-2-0x00007FF91C8A0000-0x00007FF91D241000-memory.dmp
memory/2560-4-0x00007FF91C8A0000-0x00007FF91D241000-memory.dmp
memory/2560-5-0x000000001BD50000-0x000000001BDEC000-memory.dmp
memory/2560-6-0x000000001BE60000-0x000000001BEC2000-memory.dmp
memory/2560-7-0x000000001C3A0000-0x000000001C470000-memory.dmp
memory/2560-9-0x00007FF91C8A0000-0x00007FF91D241000-memory.dmp
memory/2560-10-0x00007FF91C8A0000-0x00007FF91D241000-memory.dmp
memory/2560-11-0x0000000000BD0000-0x0000000000BD8000-memory.dmp
memory/2560-12-0x00007FF91C8A0000-0x00007FF91D241000-memory.dmp
memory/2560-13-0x00007FF91C8A0000-0x00007FF91D241000-memory.dmp
memory/2560-14-0x00007FF91C8A0000-0x00007FF91D241000-memory.dmp
memory/2560-15-0x00007FF91C8A0000-0x00007FF91D241000-memory.dmp
memory/2560-16-0x00007FF91C8A0000-0x00007FF91D241000-memory.dmp
memory/2560-17-0x00007FF91C8A0000-0x00007FF91D241000-memory.dmp
memory/2560-18-0x00007FF91C8A0000-0x00007FF91D241000-memory.dmp
memory/2560-19-0x00007FF91C8A0000-0x00007FF91D241000-memory.dmp
memory/2560-21-0x00007FF91C8A0000-0x00007FF91D241000-memory.dmp