Resubmissions

25-07-2024 17:44

240725-wa4psaxhma 8

25-07-2024 17:31

240725-v3s83sxdrf 8

General

  • Target

    Nexthink_Collector_autoglassbr-T77.exe

  • Size

    67.4MB

  • Sample

    240725-wa4psaxhma

  • MD5

    bbe39c9b18a0cf01dc06e7e6066182d8

  • SHA1

    c1ce5ff1045f340391872f7f14d596df91987ead

  • SHA256

    e9de164b71f028dfd1211ad2a7bf17f698f2592e031d1776fb061321906ac274

  • SHA512

    01aa24e0bd6c2a082b618d3cc20deddf590b43f682bc39e3002b3559de16268921a9fce5d21bec974affa21a57f7d6af80634d038377f1503867247d61ba0437

  • SSDEEP

    1572864:bTvLOok9zgMPQFTb1D5XdRJBdYmfCqZs0i3Ig9CxcCu8t:XTOV7YlhV5Ym6qZsH3J9C7t

Score
8/10

Malware Config

Targets

    • Target

      Nexthink_Collector_autoglassbr-T77.exe

    • Size

      67.4MB

    • MD5

      bbe39c9b18a0cf01dc06e7e6066182d8

    • SHA1

      c1ce5ff1045f340391872f7f14d596df91987ead

    • SHA256

      e9de164b71f028dfd1211ad2a7bf17f698f2592e031d1776fb061321906ac274

    • SHA512

      01aa24e0bd6c2a082b618d3cc20deddf590b43f682bc39e3002b3559de16268921a9fce5d21bec974affa21a57f7d6af80634d038377f1503867247d61ba0437

    • SSDEEP

      1572864:bTvLOok9zgMPQFTb1D5XdRJBdYmfCqZs0i3Ig9CxcCu8t:XTOV7YlhV5Ym6qZsH3J9C7t

    Score
    8/10
    • Drops file in Drivers directory

    • Executes dropped EXE

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks