fe673902cd65912a924655c876e70d892545c36d942c6a5a6f430807d46718d2

Analysis

user interaction
yes
max time kernel
899s
max time network
569s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
04/08/2026, 00:42

Target
app/Release/BellatrixLoader.exe
Size 7.5MB
Sample260804-a2c59aac32
SHA256 fe673902cd65912a924655c876e70d892545c36d942c6a5a6f430807d46718d2
MD5 ca7214d9b3b0ca4435ca8e4ed8bb64bf
SHA1 3a963d6765152b29de5302d9b6d19969fb6dfc8a
SHA512 8d14809c633cb4e153a465d9119330ad0f71e537372408f55222b9ad926105f639b17c0c2a478fd2a121602423110c6aaf653955263fdc7e9d61459f6b95e1fb
SSDEEP 49152:tl2RXU092AGkapjTgNNfspk/vaVBB/67Ru8I/FbnRaeGhSgGHe2nbb:+xU0YAGkaTpk/SDB/67Ru8gTa2Zb
TLSH
T19D866A7195CC9B5EF062A178DC83922353F07C4C2260CFA7A9E44DF7591F998FBA9209
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
5096	BellatrixLoader.exe

C:\Users\Admin\AppData\Local\Temp\app\Release\BellatrixLoader.exe
"C:\Users\Admin\AppData\Local\Temp\app\Release\BellatrixLoader.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:5096