← Customer 27935348

#32318 Threat | P1 | SentinelOne Unmitigated Suspicious Threat @ Bank of Montana

New-Blumira Created Feb 8, 2025, 12:06 PM
System (internal) Feb 8, 2025, 12:06 PM
Created from Lead: https://artichoke.shield.syncromsp.com/leads/30431083/convert
Check-in (internal) Feb 8, 2025, 12:06 PM
[embedded image](https://www.blumira.com/)

Threat | P1 | SentinelOne Unmitigated Suspicious Threat @ Bank of Montana

Blumira has detected SentinelOne Unmitigated Suspicious Threat for Bank of Montana on 2025-02-08 05:05AM MST and triggered action Create Priority 1 Threat for Responders.

Analysis:

A Malware and Cryptominer threat has been alerted on by SentinelOne on BOM-SysAdmin with the logged in user for activity related to AutoHotkeyA32_UIA.exe, Unicode 32-bit.bin, AutoHotkeyA32.exe, and 2 others.

The threat detection details include:

File can monitor clipboard content, File was compiled with AutoHotKey, File can empty the recycle bin, and 9 others

Finding ID: F-25-05-CAAE

Finding Data Source: SentinelOne Activities
Replying to this email does not open a ticket or notify the support team. Please email [email protected] or comment within the Finding.

[Learn More](https://app.blumira.com/35f9513a-d9d8-4db6-be0b-36df543b1591/query/findings/caaecfe2-ec59-42f5-b04b-e593c6feded7)

[embedded image]

[email protected]
[206 E. Huron Street, Suite 106, Ann Arbor, MI 48104](#)

afbde7f5-42bb-4094-a2b2-90b2fb3c02fa

[embedded image]
Ticket Automation (internal) Feb 8, 2025, 12:06 PM
Automation Blumira ran on this ticket. Actions: Change Status to New-Blumira