gink | de4a73426fd04805accf3b0e8939a4eb5dfeede667db869d53a9e8bafd620ce8 | Triage

Sharing

General

Target

b6ad811cab35ab7353952a3bd2cef238_JC.exe
Size

37KB
Sample

231003-sndtqsee63
MD5

b6ad811cab35ab7353952a3bd2cef238
SHA1

8f6987c9b2e55b51f3624845435cbc28face9afa
SHA256

de4a73426fd04805accf3b0e8939a4eb5dfeede667db869d53a9e8bafd620ce8
SHA512

0e6873476e358825f783604f459bcddce7453088d99c2c569d3bd4fb77a636c72b2292016b42849ef864f3576772e7cdf57ef4ff76da95fbe1c12460e34ecca5
SSDEEP

384:tif/dno/8iktfZevuKY1h1U/pOjtXz9SI28kEQ+uKxSJnI8lr:tifdtLdZMc18C99e8k9HdI8l

Score

10^/10

gink persistence worm

Malware Config

Targets

- Target
  
  b6ad811cab35ab7353952a3bd2cef238_JC.exe
- Size
  
  37KB
- MD5
  
  b6ad811cab35ab7353952a3bd2cef238
- SHA1
  
  8f6987c9b2e55b51f3624845435cbc28face9afa
- SHA256
  
  de4a73426fd04805accf3b0e8939a4eb5dfeede667db869d53a9e8bafd620ce8
- SHA512
  
  0e6873476e358825f783604f459bcddce7453088d99c2c569d3bd4fb77a636c72b2292016b42849ef864f3576772e7cdf57ef4ff76da95fbe1c12460e34ecca5
- SSDEEP
  
  384:tif/dno/8iktfZevuKY1h1U/pOjtXz9SI28kEQ+uKxSJnI8lr:tifdtLdZMc18C99e8k9HdI8l
Score

10^/10

gink persistence worm
- Gink
  worm gink
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ginkpersistenceworm

behavioral2

ginkpersistenceworm