gink | cbf0d74a56fdaca0d881ab6e5da7d89f5f21f7e73597a33217721d1853ffdf04 | Triage

Sharing

General

Target

cbf0d74a56fdaca0d881ab6e5da7d89f5f21f7e73597a33217721d1853ffdf04.exe
Size

37KB
Sample

241211-hht9es1pes
MD5

03e6c9bbe90ff0890da2a517537f173c
SHA1

44d55b2874c206ee96d6f899ea0049d5aa292875
SHA256

cbf0d74a56fdaca0d881ab6e5da7d89f5f21f7e73597a33217721d1853ffdf04
SHA512

18b1bfa646ca76375b94303d62cad8c6a03b622e91f5585d946a2a6607c7ace43c3479e8957b4dac11dadf90a986db34a4c92131f38d44c53f91bb0c5e7b99ed
SSDEEP

384:k60Tw24parfyS1F0dd3BUT6XXyTn2OenAyEYCDYGBE2fFcJnI8J3b:f1n4K8F0j3Bq6XXyT7ent5RKFcdI8Jr

Score

10^/10

gink discovery persistence worm

Malware Config

Targets

- Target
  
  cbf0d74a56fdaca0d881ab6e5da7d89f5f21f7e73597a33217721d1853ffdf04.exe
- Size
  
  37KB
- MD5
  
  03e6c9bbe90ff0890da2a517537f173c
- SHA1
  
  44d55b2874c206ee96d6f899ea0049d5aa292875
- SHA256
  
  cbf0d74a56fdaca0d881ab6e5da7d89f5f21f7e73597a33217721d1853ffdf04
- SHA512
  
  18b1bfa646ca76375b94303d62cad8c6a03b622e91f5585d946a2a6607c7ace43c3479e8957b4dac11dadf90a986db34a4c92131f38d44c53f91bb0c5e7b99ed
- SSDEEP
  
  384:k60Tw24parfyS1F0dd3BUT6XXyTn2OenAyEYCDYGBE2fFcJnI8J3b:f1n4K8F0j3Bq6XXyT7ent5RKFcdI8Jr
Score

10^/10

gink discovery persistence worm
- Gink
  worm gink
- Gink family
  gink
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ginkdiscoverypersistenceworm

behavioral2

ginkdiscoverypersistenceworm