gink | f56a2b1268505c087e89985b9ddb9fbb617acfc48ea9f6179a896e1df2283cb4 | Triage

Sharing

General

Target

f56a2b1268505c087e89985b9ddb9fbb617acfc48ea9f6179a896e1df2283cb4N.exe
Size

37KB
Sample

241210-hmfltssmek
MD5

c1a00a522e7bc9b02110a263a7f4f4b0
SHA1

f3c3cebdafaa3c7c48e3be34b58a5122eac07a61
SHA256

f56a2b1268505c087e89985b9ddb9fbb617acfc48ea9f6179a896e1df2283cb4
SHA512

07132e1009272e4768dbd5203ee77a71e076e5ed25b387ce142125332e021a6c5d8883625b924e503052bc271a5e30373b2e57eb0da5d7f63d47e79a6b113d7d
SSDEEP

384:2ahhZUSHTgYSwKbOP4kXD78dSzDdnEHLwCbl5bynA9PYPojNJnI8W:2sUXpwHQkXHDdAwCRNywPaojNdI8

Score

10^/10

gink discovery persistence worm

Malware Config

Targets

- Target
  
  f56a2b1268505c087e89985b9ddb9fbb617acfc48ea9f6179a896e1df2283cb4N.exe
- Size
  
  37KB
- MD5
  
  c1a00a522e7bc9b02110a263a7f4f4b0
- SHA1
  
  f3c3cebdafaa3c7c48e3be34b58a5122eac07a61
- SHA256
  
  f56a2b1268505c087e89985b9ddb9fbb617acfc48ea9f6179a896e1df2283cb4
- SHA512
  
  07132e1009272e4768dbd5203ee77a71e076e5ed25b387ce142125332e021a6c5d8883625b924e503052bc271a5e30373b2e57eb0da5d7f63d47e79a6b113d7d
- SSDEEP
  
  384:2ahhZUSHTgYSwKbOP4kXD78dSzDdnEHLwCbl5bynA9PYPojNJnI8W:2sUXpwHQkXHDdAwCRNywPaojNdI8
Score

10^/10

gink discovery persistence worm
- Gink
  worm gink
- Gink family
  gink
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ginkdiscoverypersistenceworm

behavioral2

ginkdiscoverypersistenceworm