gink | 820f3b45503ef5659b1c8e00d9121082657e31fb569cb2a6f8f0701255bf348a | Triage

Sharing

General

Target

4abaa56cab5f90b4061ab94ce71fd7b0_NeikiAnalytics.exe
Size

37KB
Sample

240612-2vy8paxfqp
MD5

4abaa56cab5f90b4061ab94ce71fd7b0
SHA1

a79b8236952c3af63f62a1d2aeab78f68d1b4efd
SHA256

820f3b45503ef5659b1c8e00d9121082657e31fb569cb2a6f8f0701255bf348a
SHA512

8c914f887c904e1a5a62b73723ef435b14bbba91c53a1356463feeb0068299db2312d54c72957e7a1c897348bec7c5dccb51a1ab7be0fae4f12258acc880c6ba
SSDEEP

384:j0zSn2z4uezQlFN6+OQ+8hAxvAoVlC9rxQce+KmnI8s:j6S2z4uezuNFOa8JMNxQce+nI8s

Score

10^/10

gink persistence worm

Malware Config

Targets

- Target
  
  4abaa56cab5f90b4061ab94ce71fd7b0_NeikiAnalytics.exe
- Size
  
  37KB
- MD5
  
  4abaa56cab5f90b4061ab94ce71fd7b0
- SHA1
  
  a79b8236952c3af63f62a1d2aeab78f68d1b4efd
- SHA256
  
  820f3b45503ef5659b1c8e00d9121082657e31fb569cb2a6f8f0701255bf348a
- SHA512
  
  8c914f887c904e1a5a62b73723ef435b14bbba91c53a1356463feeb0068299db2312d54c72957e7a1c897348bec7c5dccb51a1ab7be0fae4f12258acc880c6ba
- SSDEEP
  
  384:j0zSn2z4uezQlFN6+OQ+8hAxvAoVlC9rxQce+KmnI8s:j6S2z4uezuNFOa8JMNxQce+nI8s
Score

10^/10

gink persistence worm
- Gink
  worm gink
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ginkpersistenceworm

behavioral2

ginkpersistenceworm