ea62b044689bb6d2f747e17637ad24347a2a0a75364dfc72d6927f5e43e42b54 | Triage

Analysis

max time kernel
146s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20240221-en
resource tags

arch:x64arch:x86image:win10v2004-20240221-enlocale:en-usos:windows10-2004-x64system
submitted
24/02/2024, 18:21

Sharing

Report Analysis Logs

General

Target

v2/auth/authenticator.exe
Size

1009KB
MD5

2e583983b677885e2f0d1eb8e0a29154
SHA1

06430eb35b06a65160b82ea04700d4dcc55cd0b6
SHA256

2a90e89c44f21cd70c3e3d0fcdeb14be785d090a18f0f44fc4f8dc04a71c881c
SHA512

311fd40a17516c649218a4b68bceabfa842707de38b963ebb8823af12611d2e6c5a4246b9ac638189198c1b4278ef9a4537ceeed4da6c81785ca163f23a41397
SSDEEP

12288:56GLdj1IxovdV9P1ahUF6uE3hxIN1F7k0xgF0+6v5:56GLR1IWVV9da+FKxINv7/x3+6v

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1612	authenticator.exe
1612	authenticator.exe

C:\Users\Admin\AppData\Local\Temp\v2\auth\authenticator.exe
"C:\Users\Admin\AppData\Local\Temp\v2\auth\authenticator.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:1612

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads