Analysis
- max time kernel
148s - max time network
140s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
10/09/2026, 04:10
General
- Target jaffacakes118_Cop.Out.R6.LD.German.XViD.iNTERNAL-AOE _mirror_.exe
- Size 7.6MB
- Sample260910-ernapafm2z
- SHA256 b6f501aa9d3fbe3a016c04fc1a62cac686c5f5c6e642455c04c72eb689545392
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 7 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Cop.Out.R6.LD.German.XViD.iNTERNAL-AOE _mirror_.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Cop.Out.R6.LD.German.XViD.iNTERNAL-AOE _mirror_.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4684-0-0x00007FFCECFFA000-0x00007FFCECFFB000-memory.dmp
memory/4684-1-0x00007FFCECD00000-0x00007FFCED738000-memory.dmp
memory/4684-2-0x00007FFCECD00000-0x00007FFCED738000-memory.dmp
memory/4684-3-0x00007FFCECD00000-0x00007FFCED738000-memory.dmp
memory/4684-4-0x00007FFCECD00000-0x00007FFCED738000-memory.dmp
memory/4684-5-0x00007FFCECD00000-0x00007FFCED738000-memory.dmp
memory/4684-7-0x000000001B6E0000-0x000000001BBAE000-memory.dmp
memory/4684-6-0x00007FFCECD00000-0x00007FFCED738000-memory.dmp
memory/4684-8-0x000000001BC50000-0x000000001BCEC000-memory.dmp
memory/4684-9-0x000000001BD60000-0x000000001BDC2000-memory.dmp
memory/4684-10-0x000000001C2A0000-0x000000001C370000-memory.dmp
memory/4684-12-0x00007FFCECD00000-0x00007FFCED738000-memory.dmp
memory/4684-13-0x00007FFCECD00000-0x00007FFCED738000-memory.dmp
memory/4684-15-0x00007FFCECD00000-0x00007FFCED738000-memory.dmp
memory/4684-14-0x00007FFCECD00000-0x00007FFCED738000-memory.dmp
memory/4684-17-0x00007FFCECD00000-0x00007FFCED738000-memory.dmp
memory/4684-16-0x00007FFCECD00000-0x00007FFCED738000-memory.dmp
memory/4684-18-0x00007FFCECD00000-0x00007FFCED738000-memory.dmp
memory/4684-19-0x00007FFCECD00000-0x00007FFCED738000-memory.dmp
memory/4684-21-0x00007FFCECD00000-0x00007FFCED738000-memory.dmp
memory/4684-20-0x00007FFCECD00000-0x00007FFCED738000-memory.dmp
memory/4684-22-0x0000000000BD0000-0x0000000000BD8000-memory.dmp
memory/4684-23-0x00007FFCECD00000-0x00007FFCED738000-memory.dmp
memory/4684-24-0x00007FFCECD00000-0x00007FFCED738000-memory.dmp
memory/4684-25-0x00007FFCECD00000-0x00007FFCED738000-memory.dmp
memory/4684-26-0x00007FFCECD00000-0x00007FFCED738000-memory.dmp
memory/4684-27-0x00007FFCECFFA000-0x00007FFCECFFB000-memory.dmp
memory/4684-28-0x00007FFCECD00000-0x00007FFCED738000-memory.dmp
memory/4684-29-0x00007FFCECD00000-0x00007FFCED738000-memory.dmp