gink | ff90c4e0fb2dd5180e26daa86ed8de580fc0e9c67b287166121ed8ad17a64212 | Triage

Sharing

General

Target

a067a947f233d087057c6746a6f7f9e8
Size

37KB
Sample

231222-ql6qmagcaq
MD5

a067a947f233d087057c6746a6f7f9e8
SHA1

5d81096e8bcb52dc88a0f3cc555de78a31cccb4b
SHA256

ff90c4e0fb2dd5180e26daa86ed8de580fc0e9c67b287166121ed8ad17a64212
SHA512

9594b16da9865f590a15a88ce6cc136d204107b9175f97e3cf6438664f81d49d6f1689ee4c9069daeba36581c1b089bf292a2c0dba6b7956c732c57debb236cc
SSDEEP

768:gxG+C8+IsXh/2hNJgKHGhqhBlraAeUhfHH4V1I8E:OEIsEhNi/EXuAeUhf4V3E

Score

10^/10

gink persistence worm

Malware Config

Targets

- Target
  
  a067a947f233d087057c6746a6f7f9e8
- Size
  
  37KB
- MD5
  
  a067a947f233d087057c6746a6f7f9e8
- SHA1
  
  5d81096e8bcb52dc88a0f3cc555de78a31cccb4b
- SHA256
  
  ff90c4e0fb2dd5180e26daa86ed8de580fc0e9c67b287166121ed8ad17a64212
- SHA512
  
  9594b16da9865f590a15a88ce6cc136d204107b9175f97e3cf6438664f81d49d6f1689ee4c9069daeba36581c1b089bf292a2c0dba6b7956c732c57debb236cc
- SSDEEP
  
  768:gxG+C8+IsXh/2hNJgKHGhqhBlraAeUhfHH4V1I8E:OEIsEhNi/EXuAeUhf4V3E
Score

10^/10

gink persistence worm
- Gink
  worm gink
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ginkpersistenceworm

behavioral2

ginkpersistenceworm