gink | 1c3fbd71c988ee3f2fd063fea24184e1e2a6d926273664cb60f50f5f27da6010 | Triage

Sharing

General

Target

1c3fbd71c988ee3f2fd063fea24184e1e2a6d926273664cb60f50f5f27da6010
Size

37KB
Sample

220607-tls2baffhm
MD5

5fe7d7e5f9b0babfe5c2ce6dfbea80ee
SHA1

3b7aa206b76941b6540adf239ae792f3371ba187
SHA256

1c3fbd71c988ee3f2fd063fea24184e1e2a6d926273664cb60f50f5f27da6010
SHA512

4d769b5adff30e204885db925af6a28e63b323126d04609147c331414eb849183ada0e3d4fec0d30a4963b18b1c1ceb0c7284a05aad996339e10eb93e7dcd478

Score

10^/10

gink persistence worm

Malware Config

Targets

- Target
  
  1c3fbd71c988ee3f2fd063fea24184e1e2a6d926273664cb60f50f5f27da6010
- Size
  
  37KB
- MD5
  
  5fe7d7e5f9b0babfe5c2ce6dfbea80ee
- SHA1
  
  3b7aa206b76941b6540adf239ae792f3371ba187
- SHA256
  
  1c3fbd71c988ee3f2fd063fea24184e1e2a6d926273664cb60f50f5f27da6010
- SHA512
  
  4d769b5adff30e204885db925af6a28e63b323126d04609147c331414eb849183ada0e3d4fec0d30a4963b18b1c1ceb0c7284a05aad996339e10eb93e7dcd478
Score

10^/10

gink persistence worm
- Gink
  worm gink
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ginkpersistenceworm

behavioral2

ginkpersistenceworm