Analysis
- user interaction
yes - max time kernel
148s - max time network
125s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
30/09/2026, 13:12
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
MemTest64.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
MemTest64.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
General
- Target MemTest64.exe
- Size 3.1MB
- Sample260930-qfnymaxx7k
- SHA256 e0e3e405f90a44fedef0ccc0b428c65e753d39df7963c3c23fe3ae77d36971f9
- MD5 f539373e4d3b226f5bacd9e061812c81
- SHA1 3208fc79e0b3a8ee7c0016d2617a5785522faca1
- SHA512 9ffb5179a5c4d7d2a96591ad34c1ca5a4d176526700b95fc2cdef4ab2fe53ce7552c00892863e6be97b83b8d8815009da646ec57dc9257a07412545164d34af9
- SSDEEP 49152:yAUrdVtFZYBwJkCjVzGvlSu8tsdU5WcINFIJJf05YcmPXHaYD+ecZg:YVDd05YR/HaYD+hg
- TLSH T1E7E58C5ED7EC45C1D4669374C513464BF7B1F8211A71C78F00A6968A7FBB3B28E8A322
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 64 IoCs
description pid Process Token: 33 4644 MemTest64.exe Token: SeIncBasePriorityPrivilege 4644 MemTest64.exe Token: 33 4644 MemTest64.exe Token: SeIncBasePriorityPrivilege 4644 MemTest64.exe Token: 33 4644 MemTest64.exe Token: SeIncBasePriorityPrivilege 4644 MemTest64.exe Token: 33 4644 MemTest64.exe Token: SeIncBasePriorityPrivilege 4644 MemTest64.exe Token: 33 4644 MemTest64.exe Token: SeIncBasePriorityPrivilege 4644 MemTest64.exe Token: 33 4644 MemTest64.exe Token: SeIncBasePriorityPrivilege 4644 MemTest64.exe Token: 33 4644 MemTest64.exe Token: SeIncBasePriorityPrivilege 4644 MemTest64.exe Token: 33 4644 MemTest64.exe Token: SeIncBasePriorityPrivilege 4644 MemTest64.exe Token: 33 4644 MemTest64.exe Token: SeIncBasePriorityPrivilege 4644 MemTest64.exe Token: 33 4644 MemTest64.exe Token: SeIncBasePriorityPrivilege 4644 MemTest64.exe Token: 33 4644 MemTest64.exe Token: SeIncBasePriorityPrivilege 4644 MemTest64.exe Token: 33 4644 MemTest64.exe Token: SeIncBasePriorityPrivilege 4644 MemTest64.exe Token: 33 4644 MemTest64.exe Token: SeIncBasePriorityPrivilege 4644 MemTest64.exe Token: 33 4644 MemTest64.exe Token: SeIncBasePriorityPrivilege 4644 MemTest64.exe Token: 33 4644 MemTest64.exe Token: SeIncBasePriorityPrivilege 4644 MemTest64.exe Token: 33 4644 MemTest64.exe Token: SeIncBasePriorityPrivilege 4644 MemTest64.exe Token: 33 4644 MemTest64.exe Token: SeIncBasePriorityPrivilege 4644 MemTest64.exe Token: 33 4644 MemTest64.exe Token: SeIncBasePriorityPrivilege 4644 MemTest64.exe Token: 33 4644 MemTest64.exe Token: SeIncBasePriorityPrivilege 4644 MemTest64.exe Token: 33 4644 MemTest64.exe Token: SeIncBasePriorityPrivilege 4644 MemTest64.exe Token: 33 4644 MemTest64.exe Token: SeIncBasePriorityPrivilege 4644 MemTest64.exe Token: 33 4644 MemTest64.exe Token: SeIncBasePriorityPrivilege 4644 MemTest64.exe Token: 33 4644 MemTest64.exe Token: SeIncBasePriorityPrivilege 4644 MemTest64.exe Token: 33 4644 MemTest64.exe Token: SeIncBasePriorityPrivilege 4644 MemTest64.exe Token: 33 4644 MemTest64.exe Token: SeIncBasePriorityPrivilege 4644 MemTest64.exe Token: 33 4644 MemTest64.exe Token: SeIncBasePriorityPrivilege 4644 MemTest64.exe Token: 33 4644 MemTest64.exe Token: SeIncBasePriorityPrivilege 4644 MemTest64.exe Token: 33 4644 MemTest64.exe Token: SeIncBasePriorityPrivilege 4644 MemTest64.exe Token: 33 4644 MemTest64.exe Token: SeIncBasePriorityPrivilege 4644 MemTest64.exe Token: 33 4644 MemTest64.exe Token: SeIncBasePriorityPrivilege 4644 MemTest64.exe Token: 33 4644 MemTest64.exe Token: SeIncBasePriorityPrivilege 4644 MemTest64.exe Token: 33 4644 MemTest64.exe Token: SeIncBasePriorityPrivilege 4644 MemTest64.exe - Suspicious use of SetWindowsHookEx 64 IoCs
pid Process 4644 MemTest64.exe 4644 MemTest64.exe 4644 MemTest64.exe 4644 MemTest64.exe 4644 MemTest64.exe 4644 MemTest64.exe 4644 MemTest64.exe 4644 MemTest64.exe 4644 MemTest64.exe 4644 MemTest64.exe 4644 MemTest64.exe 4644 MemTest64.exe 4644 MemTest64.exe 4644 MemTest64.exe 4644 MemTest64.exe 4644 MemTest64.exe 4644 MemTest64.exe 4644 MemTest64.exe 4644 MemTest64.exe 4644 MemTest64.exe 4644 MemTest64.exe 4644 MemTest64.exe 4644 MemTest64.exe 4644 MemTest64.exe 4644 MemTest64.exe 4644 MemTest64.exe 4644 MemTest64.exe 4644 MemTest64.exe 4644 MemTest64.exe 4644 MemTest64.exe 4644 MemTest64.exe 4644 MemTest64.exe 4644 MemTest64.exe 4644 MemTest64.exe 4644 MemTest64.exe 4644 MemTest64.exe 4644 MemTest64.exe 4644 MemTest64.exe 4644 MemTest64.exe 4644 MemTest64.exe 4644 MemTest64.exe 4644 MemTest64.exe 4644 MemTest64.exe 4644 MemTest64.exe 4644 MemTest64.exe 4644 MemTest64.exe 4644 MemTest64.exe 4644 MemTest64.exe 4644 MemTest64.exe 4644 MemTest64.exe 4644 MemTest64.exe 4644 MemTest64.exe 4644 MemTest64.exe 4644 MemTest64.exe 4644 MemTest64.exe 4644 MemTest64.exe 4644 MemTest64.exe 4644 MemTest64.exe 4644 MemTest64.exe 4644 MemTest64.exe 4644 MemTest64.exe 4644 MemTest64.exe 4644 MemTest64.exe 4644 MemTest64.exe