gink | 3f71b873962fb5b51ef1a4b9dc5dc279b3750e2eac638e0b558187ab00cf4858 | Triage

Sharing

General

Target

628a33ca0c0bbfe8ccce7cc209e1a61d_JC.exe
Size

37KB
Sample

231003-v7ld2agb76
MD5

628a33ca0c0bbfe8ccce7cc209e1a61d
SHA1

3164d3e61f99dfe96a9e461f48e05fcc85b3bceb
SHA256

3f71b873962fb5b51ef1a4b9dc5dc279b3750e2eac638e0b558187ab00cf4858
SHA512

82a7e38d4e6377d896fc00330ea780e95db95cec76cbc3573239de13ce9d1f527e563340d7f3716acfc5cf2f372802b8eca3618c0f93c5c40425e92cdb9a7b5a
SSDEEP

384:9J6LsOlfzAidFXg5wTgyFk1Oj86DKeInI8zg:9Abf+CgA3j877I8z

Score

10^/10

gink persistence worm

Malware Config

Targets

- Target
  
  628a33ca0c0bbfe8ccce7cc209e1a61d_JC.exe
- Size
  
  37KB
- MD5
  
  628a33ca0c0bbfe8ccce7cc209e1a61d
- SHA1
  
  3164d3e61f99dfe96a9e461f48e05fcc85b3bceb
- SHA256
  
  3f71b873962fb5b51ef1a4b9dc5dc279b3750e2eac638e0b558187ab00cf4858
- SHA512
  
  82a7e38d4e6377d896fc00330ea780e95db95cec76cbc3573239de13ce9d1f527e563340d7f3716acfc5cf2f372802b8eca3618c0f93c5c40425e92cdb9a7b5a
- SSDEEP
  
  384:9J6LsOlfzAidFXg5wTgyFk1Oj86DKeInI8zg:9Abf+CgA3j877I8z
Score

10^/10

gink persistence worm
- Gink
  worm gink
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ginkpersistenceworm

behavioral2

ginkpersistenceworm