gink | 691f400f1ec15a8b536b24bf36f91bbaffcd9d3e0ab040d48195ea748e155e26 | Triage

Sharing

General

Target

691f400f1ec15a8b536b24bf36f91bbaffcd9d3e0ab040d48195ea748e155e26.exe
Size

37KB
Sample

250101-zef13asrf1
MD5

b1fd84d767ffe3b7c0b8c54e3a1e1d58
SHA1

d2b89674fcd930a5112ef4d1419b58509d0c0593
SHA256

691f400f1ec15a8b536b24bf36f91bbaffcd9d3e0ab040d48195ea748e155e26
SHA512

e12c3ab94bd3aad1b9946e1f749779f0d6b371b0c4d66e3264fc536520f589176abf6a997d14aaef26caa317eb50776a92ec0e9e923e5a923ed765c262f96a86
SSDEEP

384:NWSe7kGzpamkGOJBujjzXmysBhu8j5XJkYnI8xi:kS7GzpRkujzXmyyltXOyI8xi

Score

10^/10

gink discovery persistence worm

Malware Config

Targets

- Target
  
  691f400f1ec15a8b536b24bf36f91bbaffcd9d3e0ab040d48195ea748e155e26.exe
- Size
  
  37KB
- MD5
  
  b1fd84d767ffe3b7c0b8c54e3a1e1d58
- SHA1
  
  d2b89674fcd930a5112ef4d1419b58509d0c0593
- SHA256
  
  691f400f1ec15a8b536b24bf36f91bbaffcd9d3e0ab040d48195ea748e155e26
- SHA512
  
  e12c3ab94bd3aad1b9946e1f749779f0d6b371b0c4d66e3264fc536520f589176abf6a997d14aaef26caa317eb50776a92ec0e9e923e5a923ed765c262f96a86
- SSDEEP
  
  384:NWSe7kGzpamkGOJBujjzXmysBhu8j5XJkYnI8xi:kS7GzpRkujzXmyyltXOyI8xi
Score

10^/10

gink discovery persistence worm
- Gink
  worm gink
- Gink family
  gink
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ginkdiscoverypersistenceworm

behavioral2

ginkdiscoverypersistenceworm