gink | 0edb16b0b200e73e3a5897d4c63d2b50588d589e70c5d66e17a2fa6db2f1a21d | Triage

Sharing

General

Target

NEAS.ba50e4ce5adaf245eafc61ab0f9887d0.exe
Size

37KB
Sample

231102-vbcf9ace36
MD5

ba50e4ce5adaf245eafc61ab0f9887d0
SHA1

f24dc7ea6bee71dd34013a88d9a4f4fabd0796d7
SHA256

0edb16b0b200e73e3a5897d4c63d2b50588d589e70c5d66e17a2fa6db2f1a21d
SHA512

45f62536748b243b634ee3332db479d8cd0be6cb486cfefe6edd029a55d757057261aa25e12f889aeddf0c2e00e93a72cf88c4933e43b155a861ee4e0b720248
SSDEEP

384:S92CXHq9AnMTnqccdP7x9zVokRxw1zntX8QF05WbGk9JnI84:Uq9yYnhcdd5q1j58QF0gF9dI84

Score

10^/10

gink persistence worm

Malware Config

Targets

- Target
  
  NEAS.ba50e4ce5adaf245eafc61ab0f9887d0.exe
- Size
  
  37KB
- MD5
  
  ba50e4ce5adaf245eafc61ab0f9887d0
- SHA1
  
  f24dc7ea6bee71dd34013a88d9a4f4fabd0796d7
- SHA256
  
  0edb16b0b200e73e3a5897d4c63d2b50588d589e70c5d66e17a2fa6db2f1a21d
- SHA512
  
  45f62536748b243b634ee3332db479d8cd0be6cb486cfefe6edd029a55d757057261aa25e12f889aeddf0c2e00e93a72cf88c4933e43b155a861ee4e0b720248
- SSDEEP
  
  384:S92CXHq9AnMTnqccdP7x9zVokRxw1zntX8QF05WbGk9JnI84:Uq9yYnhcdd5q1j58QF0gF9dI84
Score

10^/10

gink persistence worm
- Gink
  worm gink
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ginkpersistenceworm

behavioral2

ginkpersistenceworm