gink | 6a46d67f491c186ed81c087644e4167184e9aba12b1f7c2eba0165b251eb7e3f | Triage

Sharing

General

Target

6a46d67f491c186ed81c087644e4167184e9aba12b1f7c2eba0165b251eb7e3f_NeikiAnalytics.exe
Size

37KB
Sample

240624-neb7bssgpp
MD5

13f3c8c5802e2d013c10faebb8391480
SHA1

f146a8fcd68bf8300c4c09beab88de8d3cf0d134
SHA256

6a46d67f491c186ed81c087644e4167184e9aba12b1f7c2eba0165b251eb7e3f
SHA512

990b8891717d16467232c90307851d6d7778cf0f5e1a6cc7baf57bf72951dfb018d6a59f5ef8fad865acaef8824aa13fb3dc2d8cd490de26a13e15b4b954abe9
SSDEEP

384:epAhckQj9H0okp0e4Xue3oFGz55ZK2oGnozhtN9n9nI8WAH:e2n4XDAG5HhnozT3nJI8l

Score

10^/10

gink persistence worm

Malware Config

Targets

- Target
  
  6a46d67f491c186ed81c087644e4167184e9aba12b1f7c2eba0165b251eb7e3f_NeikiAnalytics.exe
- Size
  
  37KB
- MD5
  
  13f3c8c5802e2d013c10faebb8391480
- SHA1
  
  f146a8fcd68bf8300c4c09beab88de8d3cf0d134
- SHA256
  
  6a46d67f491c186ed81c087644e4167184e9aba12b1f7c2eba0165b251eb7e3f
- SHA512
  
  990b8891717d16467232c90307851d6d7778cf0f5e1a6cc7baf57bf72951dfb018d6a59f5ef8fad865acaef8824aa13fb3dc2d8cd490de26a13e15b4b954abe9
- SSDEEP
  
  384:epAhckQj9H0okp0e4Xue3oFGz55ZK2oGnozhtN9n9nI8WAH:e2n4XDAG5HhnozT3nJI8l
Score

10^/10

gink persistence worm
- Gink
  worm gink
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ginkpersistenceworm

behavioral2

ginkpersistenceworm