gink | 1eb7e65a9e78d78aaaeaaf8c22e0002cb2e49e74f96432a4cf4432812ddb8e3f | Triage

Sharing

General

Target

1eb7e65a9e78d78aaaeaaf8c22e0002cb2e49e74f96432a4cf4432812ddb8e3f
Size

34KB
Sample

240524-x584esgc8z
MD5

02ebd3348e3469f89cbeb0872eaa32cd
SHA1

9eebab05d6434392d52166feeb1a66ca37124b1e
SHA256

1eb7e65a9e78d78aaaeaaf8c22e0002cb2e49e74f96432a4cf4432812ddb8e3f
SHA512

b2fba13b20b1391139c331f95917d043e5cdc582ffdf2aa56dd0b1a83ebe2733e7fb093d69299cd6a5153cd5721404e21aee30afbeda0fe215f8ea3d37731d33
SSDEEP

384:q6Lz0OyPaGPbG8FecNrgzbUFPlfRNefMfNq8UdsKWRzpeancfKykJIyfgS9/V+ie:q6Lo1RPbPFHRgzwFPlf/efMT9I8W

Score

10^/10

gink persistence worm

Malware Config

Targets

- Target
  
  1eb7e65a9e78d78aaaeaaf8c22e0002cb2e49e74f96432a4cf4432812ddb8e3f
- Size
  
  34KB
- MD5
  
  02ebd3348e3469f89cbeb0872eaa32cd
- SHA1
  
  9eebab05d6434392d52166feeb1a66ca37124b1e
- SHA256
  
  1eb7e65a9e78d78aaaeaaf8c22e0002cb2e49e74f96432a4cf4432812ddb8e3f
- SHA512
  
  b2fba13b20b1391139c331f95917d043e5cdc582ffdf2aa56dd0b1a83ebe2733e7fb093d69299cd6a5153cd5721404e21aee30afbeda0fe215f8ea3d37731d33
- SSDEEP
  
  384:q6Lz0OyPaGPbG8FecNrgzbUFPlfRNefMfNq8UdsKWRzpeancfKykJIyfgS9/V+ie:q6Lo1RPbPFHRgzwFPlf/efMT9I8W
Score

10^/10

gink persistence worm
- Gink
  worm gink
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ginkpersistenceworm

behavioral2

ginkpersistenceworm