gink | 4abd7c0bc1f5d01ffcf967758f76501797e918442782ea85acfbf0098f12b5ca | Triage

Sharing

General

Target

0007753fc5bfc7a66289eb0c2d5c83b8_JC.exe
Size

37KB
Sample

231003-q76yhsbb6t
MD5

0007753fc5bfc7a66289eb0c2d5c83b8
SHA1

6754b34fd7ca535c4159c1159dd2313ddd026a7c
SHA256

4abd7c0bc1f5d01ffcf967758f76501797e918442782ea85acfbf0098f12b5ca
SHA512

242a8620c1f986b0b7a131f0b28cfe2b1f4be08e599b732ca84c70fe6bd76bda0844271a1a727ce6c0a484ba6dabaedc2cefbe94d251eb314136f451fee5bd73
SSDEEP

384:IXC0X3NkdSUZWj1Q3r4OQoCU1LP94Ah40SESqRfBiCrHh0nJnI86edXJG:IXC+ha4OQol10HZqBBiEHhKdI8xG

Score

10^/10

gink persistence worm

Malware Config

Targets

- Target
  
  0007753fc5bfc7a66289eb0c2d5c83b8_JC.exe
- Size
  
  37KB
- MD5
  
  0007753fc5bfc7a66289eb0c2d5c83b8
- SHA1
  
  6754b34fd7ca535c4159c1159dd2313ddd026a7c
- SHA256
  
  4abd7c0bc1f5d01ffcf967758f76501797e918442782ea85acfbf0098f12b5ca
- SHA512
  
  242a8620c1f986b0b7a131f0b28cfe2b1f4be08e599b732ca84c70fe6bd76bda0844271a1a727ce6c0a484ba6dabaedc2cefbe94d251eb314136f451fee5bd73
- SSDEEP
  
  384:IXC0X3NkdSUZWj1Q3r4OQoCU1LP94Ah40SESqRfBiCrHh0nJnI86edXJG:IXC+ha4OQol10HZqBBiEHhKdI8xG
Score

10^/10

gink persistence worm
- Gink
  worm gink
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ginkpersistenceworm

behavioral2

ginkpersistenceworm