gink | 0971fe5700a6bbf5d8141d588bf770c370a4e003a242d317f67fd6c7a0827dd4 | Triage

Sharing

General

Target

0971fe5700a6bbf5d8141d588bf770c370a4e003a242d317f67fd6c7a0827dd4.exe
Size

34KB
Sample

240523-ry5vjaef27
MD5

5fa1367d1793e42432e0db4ac00e6cf4
SHA1

79d8504456b883eed9ddc59c96c67c4a4a4e8f1a
SHA256

0971fe5700a6bbf5d8141d588bf770c370a4e003a242d317f67fd6c7a0827dd4
SHA512

8c80cd3f0f8fc333d30717cfa0c6bfb9dbd8b84cf5da3bf66b7afe7303182990988288f2673f2c1d8fb2188a649ce4ad8251f04e5da780bab79d91525effbcea
SSDEEP

384:o6Lz0OyPaGPbG8FecNrgzbUFPlfRNefMfNq8UBTvxKWRzpeancfKykJIyfgS9/VN:o6Lo1RPbPFHRgzwFPlf/efMT6TqI8W

Score

10^/10

gink persistence worm

Malware Config

Targets

- Target
  
  0971fe5700a6bbf5d8141d588bf770c370a4e003a242d317f67fd6c7a0827dd4.exe
- Size
  
  34KB
- MD5
  
  5fa1367d1793e42432e0db4ac00e6cf4
- SHA1
  
  79d8504456b883eed9ddc59c96c67c4a4a4e8f1a
- SHA256
  
  0971fe5700a6bbf5d8141d588bf770c370a4e003a242d317f67fd6c7a0827dd4
- SHA512
  
  8c80cd3f0f8fc333d30717cfa0c6bfb9dbd8b84cf5da3bf66b7afe7303182990988288f2673f2c1d8fb2188a649ce4ad8251f04e5da780bab79d91525effbcea
- SSDEEP
  
  384:o6Lz0OyPaGPbG8FecNrgzbUFPlfRNefMfNq8UBTvxKWRzpeancfKykJIyfgS9/VN:o6Lo1RPbPFHRgzwFPlf/efMT6TqI8W
Score

10^/10

gink persistence worm
- Gink
  worm gink
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ginkpersistenceworm

behavioral2

ginkpersistenceworm