gink | 40c16c01e96e0eacea94a6b5ab814112ae56c4f5513059471c2e3011953f9cdf | Triage

Sharing

General

Target

a40c1d90e49eeb6e9025388140b982e6_JC.exe
Size

37KB
Sample

230930-pdtwesda46
MD5

a40c1d90e49eeb6e9025388140b982e6
SHA1

ed9e0f631e8dd9e924da0205fbe575273e8da37e
SHA256

40c16c01e96e0eacea94a6b5ab814112ae56c4f5513059471c2e3011953f9cdf
SHA512

d295d839182d06d47a6edb7d22c273858fb929bfae28f0dea2023f2e4bc3932729691752499fccb1141385c2aa72b3a01dff3b1efbb025c914d5195435245e43
SSDEEP

384:dY1K97hMZoPp+dtbgSFArt0O7vJVn4MGrK42089AyjQakoa7SHnI87hZR:dBlCep+dtgO0RhVnTf42IIYfkI87hZ

Score

10^/10

gink persistence worm

Malware Config

Targets

- Target
  
  a40c1d90e49eeb6e9025388140b982e6_JC.exe
- Size
  
  37KB
- MD5
  
  a40c1d90e49eeb6e9025388140b982e6
- SHA1
  
  ed9e0f631e8dd9e924da0205fbe575273e8da37e
- SHA256
  
  40c16c01e96e0eacea94a6b5ab814112ae56c4f5513059471c2e3011953f9cdf
- SHA512
  
  d295d839182d06d47a6edb7d22c273858fb929bfae28f0dea2023f2e4bc3932729691752499fccb1141385c2aa72b3a01dff3b1efbb025c914d5195435245e43
- SSDEEP
  
  384:dY1K97hMZoPp+dtbgSFArt0O7vJVn4MGrK42089AyjQakoa7SHnI87hZR:dBlCep+dtgO0RhVnTf42IIYfkI87hZ
Score

10^/10

gink persistence worm
- Gink
  worm gink
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ginkpersistenceworm

behavioral2

ginkpersistenceworm