gink | 9e8a19d65101b56e99f9d86bc1dfb24a671c4d83278c300e530426f90e9dac94 | Triage

Sharing

General

Target

9e8a19d65101b56e99f9d86bc1dfb24a671c4d83278c300e530426f90e9dac94N.exe
Size

37KB
Sample

241211-a96grsxnds
MD5

9ce192f9e146df1921dbfb54ff653d60
SHA1

36784789ff2c00a212bb178572b3e7cc3e1d2f0e
SHA256

9e8a19d65101b56e99f9d86bc1dfb24a671c4d83278c300e530426f90e9dac94
SHA512

a6ad1698a468826a1b098e7fe66fcfe51349bc6ce8c031c8d3a03925bf265a5ca7390d8a2f2eec0332275a5722f31536b94d94bbd61cec90cf9d51dbdaf1ae46
SSDEEP

384:fuBdtiFzMEhpv92ic2ttzJ/NH4q4B5NvkplmRESCu52IlzMFDlUnI8dGrdJ:fcdtiFHvbJB4qA5NvbESCupI8dGrdJ

Score

10^/10

gink discovery persistence worm

Malware Config

Targets

- Target
  
  9e8a19d65101b56e99f9d86bc1dfb24a671c4d83278c300e530426f90e9dac94N.exe
- Size
  
  37KB
- MD5
  
  9ce192f9e146df1921dbfb54ff653d60
- SHA1
  
  36784789ff2c00a212bb178572b3e7cc3e1d2f0e
- SHA256
  
  9e8a19d65101b56e99f9d86bc1dfb24a671c4d83278c300e530426f90e9dac94
- SHA512
  
  a6ad1698a468826a1b098e7fe66fcfe51349bc6ce8c031c8d3a03925bf265a5ca7390d8a2f2eec0332275a5722f31536b94d94bbd61cec90cf9d51dbdaf1ae46
- SSDEEP
  
  384:fuBdtiFzMEhpv92ic2ttzJ/NH4q4B5NvkplmRESCu52IlzMFDlUnI8dGrdJ:fcdtiFHvbJB4qA5NvbESCupI8dGrdJ
Score

10^/10

gink discovery persistence worm
- Gink
  worm gink
- Gink family
  gink
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ginkdiscoverypersistenceworm

behavioral2

ginkdiscoverypersistenceworm