gink | 97f15b29e2601b7bb38a9cce01ae72769738c13f10b1a7923ac19d0b9d3aa2d6 | Triage

Sharing

General

Target

97f15b29e2601b7bb38a9cce01ae72769738c13f10b1a7923ac19d0b9d3aa2d6
Size

37KB
Sample

240312-akrmbace78
MD5

a4fa956cfa89aa5f609c852331284440
SHA1

304b3b04bd92bb116e70321f19d6b9b412508db4
SHA256

97f15b29e2601b7bb38a9cce01ae72769738c13f10b1a7923ac19d0b9d3aa2d6
SHA512

625d6777df6fc98c1ac7c75dbea9546820ae94161be7680fa9a35174e45f4c2e7feddfb91947c336441c6b512ca4a7c6498d3776909342ee01b11854f5fea349
SSDEEP

768:U1swMv+weN9wQhE1J+pE3yNyRZFyLI8SY:8M8N9wzsyPaJ

Score

10^/10

gink persistence worm

Malware Config

Targets

- Target
  
  97f15b29e2601b7bb38a9cce01ae72769738c13f10b1a7923ac19d0b9d3aa2d6
- Size
  
  37KB
- MD5
  
  a4fa956cfa89aa5f609c852331284440
- SHA1
  
  304b3b04bd92bb116e70321f19d6b9b412508db4
- SHA256
  
  97f15b29e2601b7bb38a9cce01ae72769738c13f10b1a7923ac19d0b9d3aa2d6
- SHA512
  
  625d6777df6fc98c1ac7c75dbea9546820ae94161be7680fa9a35174e45f4c2e7feddfb91947c336441c6b512ca4a7c6498d3776909342ee01b11854f5fea349
- SSDEEP
  
  768:U1swMv+weN9wQhE1J+pE3yNyRZFyLI8SY:8M8N9wzsyPaJ
Score

10^/10

gink persistence worm
- Gink
  worm gink
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ginkpersistenceworm

behavioral2

ginkpersistenceworm