hxxp://intent[:]#Intent;action=com[.]google[.]android[.]apps[.]authenticator[.]AUTHENTICATE;S[.]request=%7B%22type%22%3A%22u2f_sign_request%22%2C%22appId%22%3A%22https%3A%2F%2Fwww[.]gstatic[.]com%2Fsecuritykey%2Forigins[.]json%22%2C%22challenge%22%3A%22ADl0CrSFODMjuVXVQMqSicIPPAUA3E98DgVfW53494aRz9YhGsSnY5hhoElJR-wVb6TGPJLsS_EMMbDG4e5dorE7Tng8zmEeQsynJctD924hYdqHwrc87ihiJaXL4mqrijuVP2Cg1Vt4mVDn4c8_3vDNgln2W8vE87rXCbIz4_z52zpIB-zrVaKKVusiA3OD_osi-eAJMYzQr7546FgLKq3ag1dADdY5zg-zYwUsYBiz_JHt0lGnz2sAJ6SNJtEPuC9VxffjOWJd5vpo_cvIeVLuRPQKxLUSaucQj8Y2UIuTT0pt0uLcWcjk1E-pvuVqYWuOKxLVE0ld3w4yuI2xZxN59O9EzoI19fA6_4Hi2BPQcG3jGe7v839SpS8dxmy1OMu8cBhunsL0QhaOu-Y9rlbjpeah4P_PLkep3kpxxk8beeWoVMC6nAfV2e1VxrR_v5baBS4AtmcBNOtOoAb7hnKAAWi9tr72JazXUs8g-GaJ7WooebTsCTe8_Qy5sRnZVfLNV3CryNATDvnTKlObzGAOZIjGScwtm0UcAgOb2hYAV9dDfcAINjthRaN4kPdFF3KCuljmLdvJhawhG8SKBL7IFSrrlWJ_5vuWgxwYXe_lwlHivU_cW2NDlP8V-Df8vFZagrvWEtLyKZDp4jFXITz1n9PGJK_E_BZSgURT4qWWlIIdVKrb81HV0caVQmyRzclhI0WmODU0VdzCQES9OTx57iTLEIwOSRUAKx-F-5svqOdc4sLbQxVkqluMFHet5xsHYu2cLUQiXjzanGGJMX4dKrmNjyM62m1_9alhxhd6hQqBMC6RRBmNn7O83s98hrErvQ1G5SfuQ0GZLIZARj8Tx2FpecHTbE9vRd2ztfD45TfF80ctMILhuy5pFhF4ZEZRz36p6a48nbIfOfKFcbfYuu86sFwrm4g3GFeAl39X76mbRHtxASLQfNLRRl_lpRYKjH-lzcCN5m43ZxH8ZyMbvo82COgg_d4Mt5HUOAxmTkcH5gU7_nb2j2LdmqCapDzd6d-IiUqgiK52AmXK7w6hRx4uAhD6nzSzc-QTNCImIJuKWgQRq1YnSirYQeSOxv5OOGpQyC4uOmPLDjDGYAqj_MJtAfA0WPJ4W6Kesv0xTVB7BDdLpgNRIyDW7LRLOpSARm1z2th-hcoE7FHYPLiLKcPE29Y3HOu_x1_38Pn2IGT4fGhf21OiQeE8v-2jP2QKZeKwdrwRpf8fwqcbFFm2fXZmmouL4Kb5brNLWkVhcdahzz52Hrk8TxOv3rbOquWDf6p9xyViFiS0aG5eyq9e-GiWXZ5GeseVd68baMTL85zBkGyw95JagTR4zvSKfQVGsgSHh5piI8oy1UXfjiyn6jnxYE7KfEJQgCv2QMsuGJZT02i9KJf7OPVrbzUMaZwB3A3NNMstpY3sS3t8FmZfpBMyCdhbk0HE2OR_MbSlAPi4ZoMHEWQqt6hb0Bibx6u7qsEkfHePTM6UQOtqSfDuUzQ9VDdHp-Yk9ZHdZmk3qidJPOIb7Zran1otrnLM5BSpkG2wDsCflUF7B4f_xcF1xobuBEYA-VcwHCfqMis12sdEPOoX4DLLYeTY18RLl8rE7fIJ1ZlUXy64GMf49oNR-pgXalcMSgQx1IOupk4qd2-PgaAtZ6-qC6WB3J0zKXcF5nd05vy84eYNwRc0HM1NzmZJ8hj_Lh4WjX00NmEUYcnJ6VFOxl-8HQZStuGGIXMTmURllv4rwDplGWlXu-1Lbk6-XGDLILlW3hR6OoXUCln52Id8hTCS6ZMt9EOmETkcenXAp4bPrOFZ0b6nh2ZRJiZ1wOkjqMDXN3wwl7sf8QkXjz7Br4F2qY0NFOHNxKn-G3axVAqg2JVTXHlmgSDpJu-IGhhYKo_XIaYPEs9cseD579DmCWTesIvRFpFoOvlvwSfxeA%22%2C%22registeredKeys%22%3A%5B%7B%22version%22%3A%22U2F_V2%22%2C%22keyHandle%22%3A%223jNgMn2tsB8btNDKXdiyL4eaTZ38pEDw5c-gME5Yz___P7MYiEdG7dGTWZ57wc1ibTtKruxbmaojAnBEH0okyA%22%7D%2C%7B%22version%22%3A%22U2F_V2%22%2C%22keyHandle%22%3A%22QRJ_8t1AR4UZ3SWmVagiU648dxlPf6deO0eR_Q8_y2UJGaf2VTv99M5DPUJRQCJyORUV5JWpF5yCGnXkp-O4Nw%22%7D%5D%2C%22timeoutSeconds%22%3A180%2C%22requestId%22%3A1357376742%7D;end

Sharing

Behavioral task

behavioral1

Sample

http://intent:#Intent;action=com.google.android.apps.authenticator.AUTHENTICATE;S.request=%7B%22type%22%3A%22u2f_sign_request%22%2C%22appId%22%3A%22https%3A%2F%2Fwww.gstatic.com%2Fsecuritykey%2Forigins.json%22%2C%22challenge%22%3A%22ADl0CrSFODMjuVXVQMqSicIPPAUA3E98DgVfW53494aRz9YhGsSnY5hhoElJR-wVb6TGPJLsS_EMMbDG4e5dorE7Tng8zmEeQsynJctD924hYdqHwrc87ihiJaXL4mqrijuVP2Cg1Vt4mVDn4c8_3vDNgln2W8vE87rXCbIz4_z52zpIB-zrVaKKVusiA3OD_osi-eAJMYzQr7546FgLKq3ag1dADdY5zg-zYwUsYBiz_JHt0lGnz2sAJ6SNJtEPuC9VxffjOWJd5vpo_cvIeVLuRPQKxLUSaucQj8Y2UIuTT0pt0uLcWcjk1E-pvuVqYWuOKxLVE0ld3w4yuI2xZxN59O9EzoI19fA6_4Hi2BPQcG3jGe7v839SpS8dxmy1OMu8cBhunsL0QhaOu-Y9rlbjpeah4P_PLkep3kpxxk8beeWoVMC6nAfV2e1VxrR_v5baBS4AtmcBNOtOoAb7hnKAAWi9tr72JazXUs8g-GaJ7WooebTsCTe8_Qy5sRnZVfLNV3CryNATDvnTKlObzGAOZIjGScwtm0UcAgOb2hYAV9dDfcAINjthRaN4kPdFF3KCuljmLdvJhawhG8SKBL7IFSrrlWJ_5vuWgxwYXe_lwlHivU_cW2NDlP8V-Df8vFZagrvWEtLyKZDp4jFXITz1n9PGJK_E_BZSgURT4qWWlIIdVKrb81HV0caVQmyRzclhI0WmODU0VdzCQES9OTx57iTLEIwOSRUAKx-F-5svqOdc4sLbQxVkqluMFHet5xsHYu2cLUQiXjzanGGJMX4dKrmNjyM62m1_9alhxhd6hQqBMC6RRBmNn7O83s98hrErvQ1G5SfuQ0GZLIZARj8Tx2FpecHTbE9vRd2ztfD45TfF80ctMILhuy5pFhF4ZEZRz36p6a48nbIfOfKFcbfYuu86sFwrm4g3GFeAl39X76mbRHtxASLQfNLRRl_lpRYKjH-lzcCN5m43ZxH8ZyMbvo82COgg_d4Mt5HUOAxmTkcH5gU7_nb2j2LdmqCapDzd6d-IiUqgiK52AmXK7w6hRx4uAhD6nzSzc-QTNCImIJuKWgQRq1YnSirYQeSOxv5OOGpQyC4uOmPLDjDGYAqj_MJtAfA0WPJ4W6Kesv0xTVB7BDdLpgNRIyDW7LRLOpSARm1z2th-hcoE7FHYPLiLKcPE29Y3HOu_x1_38Pn2IGT4fGhf21OiQeE8v-2jP2QKZeKwdrwRpf8fwqcbFFm2fXZmmouL4Kb5brNLWkVhcdahzz52Hrk8TxOv3rbOquWDf6p9xyViFiS0aG5eyq9e-GiWXZ5GeseVd68baMTL85zBkGyw95JagTR4zvSKfQVGsgSHh5piI8oy1UXfjiyn6jnxYE7KfEJQgCv2QMsuGJZT02i9KJf7OPVrbzUMaZwB3A3NNMstpY3sS3t8FmZfpBMyCdhbk0HE2OR_MbSlAPi4ZoMHEWQqt6hb0Bibx6u7qsEkfHePTM6UQOtqSfDuUzQ9VDdHp-Yk9ZHdZmk3qidJPOIb7Zran1otrnLM5BSpkG2wDsCflUF7B4f_xcF1xobuBEYA-VcwHCfqMis12sdEPOoX4DLLYeTY18RLl8rE7fIJ1ZlUXy64GMf49oNR-pgXalcMSgQx1IOupk4qd2-PgaAtZ6-qC6WB3J0zKXcF5nd05vy84eYNwRc0HM1NzmZJ8hj_Lh4WjX00NmEUYcnJ6VFOxl-8HQZStuGGIXMTmURllv4rwDplGWlXu-1Lbk6-XGDLILlW3hR6OoXUCln52Id8hTCS6ZMt9EOmETkcenXAp4bPrOFZ0b6nh2ZRJiZ1wOkjqMDXN3wwl7sf8QkXjz7Br4F2qY0NFOHNxKn-G3axVAqg2JVTXHlmgSDpJu-IGhhYKo_XIaYPEs9cseD579DmCWTesIvRFpFoOvlvwSfxeA%22%2C%22registeredKeys%22%3A%5B%7B%22version%22%3A%22U2F_V2%22%2C%22keyHandle%22%3A%223jNgMn2tsB8btNDKXdiyL4eaTZ38pEDw5c-gME5Yz___P7MYiEdG7dGTWZ57wc1ibTtKruxbmaojAnBEH0okyA%22%7D%2C%7B%22version%22%3A%22U2F_V2%22%2C%22keyHandle%22%3A%22QRJ_8t1AR4UZ3SWmVagiU648dxlPf6deO0eR_Q8_y2UJGaf2VTv99M5DPUJRQCJyORUV5JWpF5yCGnXkp-O4Nw%22%7D%5D%2C%22timeoutSeconds%22%3A180%2C%22requestId%22%3A1357376742%7D;end

Resource

win10v2004-20230703-en

windows10-2004-x64

6 signatures

150 seconds

General

Target

http://intent:#Intent;action=com.google.android.apps.authenticator.AUTHENTICATE;S.request=%7B%22type%22%3A%22u2f_sign_request%22%2C%22appId%22%3A%22https%3A%2F%2Fwww.gstatic.com%2Fsecuritykey%2Forigins.json%22%2C%22challenge%22%3A%22ADl0CrSFODMjuVXVQMqSicIPPAUA3E98DgVfW53494aRz9YhGsSnY5hhoElJR-wVb6TGPJLsS_EMMbDG4e5dorE7Tng8zmEeQsynJctD924hYdqHwrc87ihiJaXL4mqrijuVP2Cg1Vt4mVDn4c8_3vDNgln2W8vE87rXCbIz4_z52zpIB-zrVaKKVusiA3OD_osi-eAJMYzQr7546FgLKq3ag1dADdY5zg-zYwUsYBiz_JHt0lGnz2sAJ6SNJtEPuC9VxffjOWJd5vpo_cvIeVLuRPQKxLUSaucQj8Y2UIuTT0pt0uLcWcjk1E-pvuVqYWuOKxLVE0ld3w4yuI2xZxN59O9EzoI19fA6_4Hi2BPQcG3jGe7v839SpS8dxmy1OMu8cBhunsL0QhaOu-Y9rlbjpeah4P_PLkep3kpxxk8beeWoVMC6nAfV2e1VxrR_v5baBS4AtmcBNOtOoAb7hnKAAWi9tr72JazXUs8g-GaJ7WooebTsCTe8_Qy5sRnZVfLNV3CryNATDvnTKlObzGAOZIjGScwtm0UcAgOb2hYAV9dDfcAINjthRaN4kPdFF3KCuljmLdvJhawhG8SKBL7IFSrrlWJ_5vuWgxwYXe_lwlHivU_cW2NDlP8V-Df8vFZagrvWEtLyKZDp4jFXITz1n9PGJK_E_BZSgURT4qWWlIIdVKrb81HV0caVQmyRzclhI0WmODU0VdzCQES9OTx57iTLEIwOSRUAKx-F-5svqOdc4sLbQxVkqluMFHet5xsHYu2cLUQiXjzanGGJMX4dKrmNjyM62m1_9alhxhd6hQqBMC6RRBmNn7O83s98hrErvQ1G5SfuQ0GZLIZARj8Tx2FpecHTbE9vRd2ztfD45TfF80ctMILhuy5pFhF4ZEZRz36p6a48nbIfOfKFcbfYuu86sFwrm4g3GFeAl39X76mbRHtxASLQfNLRRl_lpRYKjH-lzcCN5m43ZxH8ZyMbvo82COgg_d4Mt5HUOAxmTkcH5gU7_nb2j2LdmqCapDzd6d-IiUqgiK52AmXK7w6hRx4uAhD6nzSzc-QTNCImIJuKWgQRq1YnSirYQeSOxv5OOGpQyC4uOmPLDjDGYAqj_MJtAfA0WPJ4W6Kesv0xTVB7BDdLpgNRIyDW7LRLOpSARm1z2th-hcoE7FHYPLiLKcPE29Y3HOu_x1_38Pn2IGT4fGhf21OiQeE8v-2jP2QKZeKwdrwRpf8fwqcbFFm2fXZmmouL4Kb5brNLWkVhcdahzz52Hrk8TxOv3rbOquWDf6p9xyViFiS0aG5eyq9e-GiWXZ5GeseVd68baMTL85zBkGyw95JagTR4zvSKfQVGsgSHh5piI8oy1UXfjiyn6jnxYE7KfEJQgCv2QMsuGJZT02i9KJf7OPVrbzUMaZwB3A3NNMstpY3sS3t8FmZfpBMyCdhbk0HE2OR_MbSlAPi4ZoMHEWQqt6hb0Bibx6u7qsEkfHePTM6UQOtqSfDuUzQ9VDdHp-Yk9ZHdZmk3qidJPOIb7Zran1otrnLM5BSpkG2wDsCflUF7B4f_xcF1xobuBEYA-VcwHCfqMis12sdEPOoX4DLLYeTY18RLl8rE7fIJ1ZlUXy64GMf49oNR-pgXalcMSgQx1IOupk4qd2-PgaAtZ6-qC6WB3J0zKXcF5nd05vy84eYNwRc0HM1NzmZJ8hj_Lh4WjX00NmEUYcnJ6VFOxl-8HQZStuGGIXMTmURllv4rwDplGWlXu-1Lbk6-XGDLILlW3hR6OoXUCln52Id8hTCS6ZMt9EOmETkcenXAp4bPrOFZ0b6nh2ZRJiZ1wOkjqMDXN3wwl7sf8QkXjz7Br4F2qY0NFOHNxKn-G3axVAqg2JVTXHlmgSDpJu-IGhhYKo_XIaYPEs9cseD579DmCWTesIvRFpFoOvlvwSfxeA%22%2C%22registeredKeys%22%3A%5B%7B%22version%22%3A%22U2F_V2%22%2C%22keyHandle%22%3A%223jNgMn2tsB8btNDKXdiyL4eaTZ38pEDw5c-gME5Yz___P7MYiEdG7dGTWZ57wc1ibTtKruxbmaojAnBEH0okyA%22%7D%2C%7B%22version%22%3A%22U2F_V2%22%2C%22keyHandle%22%3A%22QRJ_8t1AR4UZ3SWmVagiU648dxlPf6deO0eR_Q8_y2UJGaf2VTv99M5DPUJRQCJyORUV5JWpF5yCGnXkp-O4Nw%22%7D%5D%2C%22timeoutSeconds%22%3A180%2C%22requestId%22%3A1357376742%7D;end

Sharing

General

Malware Config

Signatures

Files