Analysis
- max time kernel
150s - max time network
145s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
10/09/2026, 04:09
General
- Target jaffacakes118__500.Days.of.Summer.WORKPRINT.MD.German.XViD-AOE _mirror_.exe
- Size 10.9MB
- Sample260910-eqzbkafl7v
- SHA256 86a2e27058e3771063cc541776b543acb8f2ee5b915e8290288c292f397759ba
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 7 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118__500.Days.of.Summer.WORKPRINT.MD.German.XViD-AOE _mirror_.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118__500.Days.of.Summer.WORKPRINT.MD.German.XViD-AOE _mirror_.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/5780-0-0x00007FFA850EA000-0x00007FFA850EB000-memory.dmp
memory/5780-1-0x00007FFA84DF0000-0x00007FFA85828000-memory.dmp
memory/5780-2-0x00007FFA84DF0000-0x00007FFA85828000-memory.dmp
memory/5780-3-0x00007FFA84DF0000-0x00007FFA85828000-memory.dmp
memory/5780-5-0x000000001BA70000-0x000000001BF3E000-memory.dmp
memory/5780-7-0x000000001BFE0000-0x000000001C07C000-memory.dmp
memory/5780-8-0x000000001C0F0000-0x000000001C152000-memory.dmp
memory/5780-9-0x00007FFA84DF0000-0x00007FFA85828000-memory.dmp
memory/5780-10-0x000000001C630000-0x000000001C700000-memory.dmp
memory/5780-12-0x00007FFA84DF0000-0x00007FFA85828000-memory.dmp
memory/5780-13-0x00007FFA84DF0000-0x00007FFA85828000-memory.dmp
memory/5780-6-0x00007FFA84DF0000-0x00007FFA85828000-memory.dmp
memory/5780-4-0x00007FFA84DF0000-0x00007FFA85828000-memory.dmp
memory/5780-14-0x00007FFA84DF0000-0x00007FFA85828000-memory.dmp
memory/5780-15-0x00007FFA84DF0000-0x00007FFA85828000-memory.dmp
memory/5780-17-0x00007FFA84DF0000-0x00007FFA85828000-memory.dmp
memory/5780-16-0x00007FFA84DF0000-0x00007FFA85828000-memory.dmp
memory/5780-18-0x00007FFA84DF0000-0x00007FFA85828000-memory.dmp
memory/5780-19-0x00007FFA84DF0000-0x00007FFA85828000-memory.dmp
memory/5780-20-0x0000000000D60000-0x0000000000D68000-memory.dmp
memory/5780-21-0x00007FFA84DF0000-0x00007FFA85828000-memory.dmp
memory/5780-22-0x00007FFA84DF0000-0x00007FFA85828000-memory.dmp
memory/5780-23-0x00007FFA84DF0000-0x00007FFA85828000-memory.dmp
memory/5780-24-0x00007FFA84DF0000-0x00007FFA85828000-memory.dmp
memory/5780-25-0x00007FFA84DF0000-0x00007FFA85828000-memory.dmp