Analysis
-
max time kernel
93s -
max time network
95s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
02-10-2024 01:23
General
-
Target
KA-MemIntegrity_x86_x64_v1.1.exe
-
Size
351KB
-
MD5
877a111203c6c66509c6a946822050aa
-
SHA1
bb88e7134729d0fa32335a573881f0bc73c298fe
-
SHA256
b0080c00e9fbe13df87806bd20826eb9735a8b67f3f6aae58b3b370ed381003c
-
SHA512
2723aaa1c12e7c64617da1a543c22f7a92a7df42cd825b78585711aaa650b330bfe75716fd5924e1b5b3d17ece2e6c9c2d69641ae1cc2b5e4889eff8cbef97a7
-
SSDEEP
3072:v+iP3g1kBnFMYuOiFUlTRqg2VeHeKj6zJW9HTfYCf0ctQ46YLQhruyF0gXgv:v+tkFMYViFUlTRzye8NWpBYRwv
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\KA-MemIntegrity_x86_x64_v1.1.exe"C:\Users\Admin\AppData\Local\Temp\KA-MemIntegrity_x86_x64_v1.1.exe"1⤵
- Suspicious use of AdjustPrivilegeToken