gink | 973edbe65415ac817d30a5333e236a4d663bf66c52c7284dfe3bb0eaae52c86b | Triage

Sharing

General

Target

NEAS.371a1e8b40a26f3e69ab4f54e4910410.exe
Size

37KB
Sample

231021-z46ysadh26
MD5

371a1e8b40a26f3e69ab4f54e4910410
SHA1

ed2564124c440545e37fee51cd6e0fce05575cd5
SHA256

973edbe65415ac817d30a5333e236a4d663bf66c52c7284dfe3bb0eaae52c86b
SHA512

bd2a02f93f162e56cca506aae9d3d8a5f29e8454548a1577870bc8eae29935526eb1c1a2b7c0cbb77e7cbe7163e1568e9e72254488b22203ad3e3a0dd1aa5c2b
SSDEEP

384:74sfDpZ/lCNoVb8Wd4zxFHX5EveMAnj5XFQdfMNtO+pp95X2TAzgnI82AO:7vfDpZ/n6wwSvS4dfy42+82I82A

Score

10^/10

gink persistence worm

Malware Config

Targets

- Target
  
  NEAS.371a1e8b40a26f3e69ab4f54e4910410.exe
- Size
  
  37KB
- MD5
  
  371a1e8b40a26f3e69ab4f54e4910410
- SHA1
  
  ed2564124c440545e37fee51cd6e0fce05575cd5
- SHA256
  
  973edbe65415ac817d30a5333e236a4d663bf66c52c7284dfe3bb0eaae52c86b
- SHA512
  
  bd2a02f93f162e56cca506aae9d3d8a5f29e8454548a1577870bc8eae29935526eb1c1a2b7c0cbb77e7cbe7163e1568e9e72254488b22203ad3e3a0dd1aa5c2b
- SSDEEP
  
  384:74sfDpZ/lCNoVb8Wd4zxFHX5EveMAnj5XFQdfMNtO+pp95X2TAzgnI82AO:7vfDpZ/n6wwSvS4dfy42+82I82A
Score

10^/10

gink persistence worm
- Gink
  worm gink
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

ginkpersistenceworm