gink | da2ca61aae6fc3aa751781490fc713b00a40e39248225c3089973c3e406abf7b | Triage

Sharing

General

Target

da2ca61aae6fc3aa751781490fc713b00a40e39248225c3089973c3e406abf7b.exe
Size

37KB
Sample

241211-d3hznsvkcz
MD5

3100ef25c1d2530a491787a1ca091e7a
SHA1

bd65f42e4be94623e5b5d385305af9ca3e02d04d
SHA256

da2ca61aae6fc3aa751781490fc713b00a40e39248225c3089973c3e406abf7b
SHA512

cadd8c8abe9d48a02f6f9fe95ce1cea5cb4d00402419c9bf10f2808994a98f3ae587fc31597ae48bb4242732322e759029c0a1ecd8f44db63e4a651ae8d708e2
SSDEEP

384:2ahhZUSHTgYSwKbOP4kXD78dSzDdnEHLwCbl5bynA9PYPojNJnI8Wa:2sUXpwHQkXHDdAwCRNywPaojNdI8N

Score

10^/10

gink discovery persistence worm

Malware Config

Targets

- Target
  
  da2ca61aae6fc3aa751781490fc713b00a40e39248225c3089973c3e406abf7b.exe
- Size
  
  37KB
- MD5
  
  3100ef25c1d2530a491787a1ca091e7a
- SHA1
  
  bd65f42e4be94623e5b5d385305af9ca3e02d04d
- SHA256
  
  da2ca61aae6fc3aa751781490fc713b00a40e39248225c3089973c3e406abf7b
- SHA512
  
  cadd8c8abe9d48a02f6f9fe95ce1cea5cb4d00402419c9bf10f2808994a98f3ae587fc31597ae48bb4242732322e759029c0a1ecd8f44db63e4a651ae8d708e2
- SSDEEP
  
  384:2ahhZUSHTgYSwKbOP4kXD78dSzDdnEHLwCbl5bynA9PYPojNJnI8Wa:2sUXpwHQkXHDdAwCRNywPaojNdI8N
Score

10^/10

gink discovery persistence worm
- Gink
  worm gink
- Gink family
  gink
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ginkdiscoverypersistenceworm

behavioral2

ginkdiscoverypersistenceworm