gink | 50bfec151ffccf4bf205e6515ff87b4c569858e31efa72d1cd2cf779f2c0584a | Triage

Sharing

General

Target

50bfec151ffccf4bf205e6515ff87b4c569858e31efa72d1cd2cf779f2c0584a
Size

37KB
Sample

240816-sys2eawdkj
MD5

da52462b60ba4e20c916209434980370
SHA1

5a7eea445197d88ccd196e82a6e967a157306d02
SHA256

50bfec151ffccf4bf205e6515ff87b4c569858e31efa72d1cd2cf779f2c0584a
SHA512

88c2698e43b0893135428202cb2cee0192ba943c777cacd5a50f41b4f83b2715e9425dac69825750772fce12529f0f8fe09ef6bb74bd38fb2ba7edcb9d737645
SSDEEP

384:UdPBU5cX6CvPVJksfhrdMVXyLV/Fe/3LXBjQr1D2u+4EcVJ7nYnI8aW9:N5S9vPfksJp2yVFEbB0BDha8DyI8z

Score

10^/10

gink discovery persistence worm

Malware Config

Targets

- Target
  
  50bfec151ffccf4bf205e6515ff87b4c569858e31efa72d1cd2cf779f2c0584a
- Size
  
  37KB
- MD5
  
  da52462b60ba4e20c916209434980370
- SHA1
  
  5a7eea445197d88ccd196e82a6e967a157306d02
- SHA256
  
  50bfec151ffccf4bf205e6515ff87b4c569858e31efa72d1cd2cf779f2c0584a
- SHA512
  
  88c2698e43b0893135428202cb2cee0192ba943c777cacd5a50f41b4f83b2715e9425dac69825750772fce12529f0f8fe09ef6bb74bd38fb2ba7edcb9d737645
- SSDEEP
  
  384:UdPBU5cX6CvPVJksfhrdMVXyLV/Fe/3LXBjQr1D2u+4EcVJ7nYnI8aW9:N5S9vPfksJp2yVFEbB0BDha8DyI8z
Score

10^/10

gink discovery persistence worm
- Gink
  worm gink
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ginkdiscoverypersistenceworm

behavioral2

ginkdiscoverypersistenceworm