4e24d3469f403d346aee8db502bcf8b774ab9558d1e00d1b1da869e15b6a72f6

Analysis

max time kernel
315s
max time network
1593s
platform
windows10-1703_x64
resource
win10-20240404-es
resource tags

arch:x64arch:x86image:win10-20240404-eslocale:es-esos:windows10-1703-x64systemwindows
submitted
04/04/2024, 17:20

Target

fenix atc/ATCFenixTelco.exe
Size

23.3MB
MD5

300b4b4fb907badd001e6cd0ec31e4a4
SHA1

0ea8bc4fec51a116dc087820a426d58e1afe394d
SHA256

7fc25cb94282fe204e9b4366c55fe891518f3c805f75a082a47532dd9d1fa39b
SHA512

561ecb69efa2155109b44fb3100d48e03bcbe6606246441b9dbeaaa8d9f936f5f22eddd25b4f5fb85f3dc151defa752c96a04c179d3d344509bd6f24e33cc53e
SSDEEP

393216:0EBx9UTVJQhSbEqVGNipShvfdZdSlm7NDOQpzi2KOooHZyr8wcpZXlnvOqYJ56b4:rX9UTVJQhSbEqVGNEShvfdZdSlm7NDOb

Score

1^/10

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4988	ATCFenixTelco.exe

C:\Users\Admin\AppData\Local\Temp\fenix atc\ATCFenixTelco.exe
"C:\Users\Admin\AppData\Local\Temp\fenix atc\ATCFenixTelco.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4988

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:3364