c117a92a2e120f4f229b0cee1f424b80dbb03cdc7f15b60c6f84255719d825b7 | Triage

Analysis

max time kernel
150s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
14/03/2024, 21:43

Sharing

Report Analysis Logs

General

Target

Balewerti.exe
Size

81.4MB
MD5

5b55494c83904257614e8121c4b46d59
SHA1

4091392c21ed699d0c4f881141c83e5520353a29
SHA256

c117a92a2e120f4f229b0cee1f424b80dbb03cdc7f15b60c6f84255719d825b7
SHA512

9cc300926e8e1346c68818303ddd4d1d44c8bace6cc508adc84c81f71d90d8da69d4a4e88f0d5f0e7b4febfbe94dc320f8e0c9bec0860cdf23fd30558007e25b
SSDEEP

393216:nm2ka3TK5skC7xCcWwrmOLa7h5WeLq2rGqJJcRelg6s2AzqJW3rqHGcU:neo+xCMbCmipepxs2AzwGrSGN

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
1776	Balewerti.exe
1776	Balewerti.exe
1776	Balewerti.exe
1776	Balewerti.exe

C:\Users\Admin\AppData\Local\Temp\Balewerti.exe
"C:\Users\Admin\AppData\Local\Temp\Balewerti.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1776

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1776-0-0x00000000057E0000-0x00000000057E1000-memory.dmp

Filesize
4KB

Download
memory/1776-1-0x0000000000400000-0x0000000005593000-memory.dmp

Filesize
81.6MB

Download
memory/1776-3-0x00000000057E0000-0x00000000057E1000-memory.dmp

Filesize
4KB

Download