gink | 0f5d614540f65971c46835e60fad72534aed1ee760b5584f8f1da2dcc1f8badc | Triage

Sharing

General

Target

0f5d614540f65971c46835e60fad72534aed1ee760b5584f8f1da2dcc1f8badcN
Size

37KB
Sample

241029-c5lynstcqq
MD5

c3c5ea35b1ac9778779aa82f36c5d350
SHA1

99e10cca925170705613dfdfc2defdc6c57951cc
SHA256

0f5d614540f65971c46835e60fad72534aed1ee760b5584f8f1da2dcc1f8badc
SHA512

42cf5c05a166e6ceb6320ac18f6abe758c81fc40d3a913d822473f905168ad9a2f525a7cd3130e43eca2415d17b92ef1d6e5d0e7a4bb67783277cf97218bfbba
SSDEEP

384:7aibsM/NUcy84ycWGsKuvPR7yX7CLoDIWfMD1oP6L+Wj1nI8G:7aibsME8RGGXVyrCLoZMWCLpjBI8

Score

10^/10

gink discovery persistence worm

Malware Config

Targets

- Target
  
  0f5d614540f65971c46835e60fad72534aed1ee760b5584f8f1da2dcc1f8badcN
- Size
  
  37KB
- MD5
  
  c3c5ea35b1ac9778779aa82f36c5d350
- SHA1
  
  99e10cca925170705613dfdfc2defdc6c57951cc
- SHA256
  
  0f5d614540f65971c46835e60fad72534aed1ee760b5584f8f1da2dcc1f8badc
- SHA512
  
  42cf5c05a166e6ceb6320ac18f6abe758c81fc40d3a913d822473f905168ad9a2f525a7cd3130e43eca2415d17b92ef1d6e5d0e7a4bb67783277cf97218bfbba
- SSDEEP
  
  384:7aibsM/NUcy84ycWGsKuvPR7yX7CLoDIWfMD1oP6L+Wj1nI8G:7aibsME8RGGXVyrCLoZMWCLpjBI8
Score

10^/10

gink discovery persistence worm
- Gink
  worm gink
- Gink family
  gink
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ginkdiscoverypersistenceworm

behavioral2

ginkdiscoverypersistenceworm