gink | f765b76affb443f9869028545ddf9603095f665df7d3ef5d76ba96ff8f81d676 | Triage

Sharing

General

Target

f765b76affb443f9869028545ddf9603095f665df7d3ef5d76ba96ff8f81d676N.exe
Size

37KB
Sample

250112-fj1rgsxmbz
MD5

112860c7097e10a1efa3abb3dc4e5ef0
SHA1

80fbb140bd78375c3da8d74f25f682dfbb33c3c3
SHA256

f765b76affb443f9869028545ddf9603095f665df7d3ef5d76ba96ff8f81d676
SHA512

866f4a03d3bd84d3fd81757c8b1cc1ab4f7ec2f20d894ad2220a2215f590b8c2d9e05181b9d160e8b69a436d4ccffdf0afdca40359480111c3d68d070be34f1f
SSDEEP

384:GGBQF9aQAjgM0TVLAUfRI8vbzDXr/xgTvmVl7WylzDjrflneWnI8/:GjLqV0ttZnX/CT0pDvflnekI8

Score

10^/10

gink discovery persistence worm

Malware Config

Targets

- Target
  
  f765b76affb443f9869028545ddf9603095f665df7d3ef5d76ba96ff8f81d676N.exe
- Size
  
  37KB
- MD5
  
  112860c7097e10a1efa3abb3dc4e5ef0
- SHA1
  
  80fbb140bd78375c3da8d74f25f682dfbb33c3c3
- SHA256
  
  f765b76affb443f9869028545ddf9603095f665df7d3ef5d76ba96ff8f81d676
- SHA512
  
  866f4a03d3bd84d3fd81757c8b1cc1ab4f7ec2f20d894ad2220a2215f590b8c2d9e05181b9d160e8b69a436d4ccffdf0afdca40359480111c3d68d070be34f1f
- SSDEEP
  
  384:GGBQF9aQAjgM0TVLAUfRI8vbzDXr/xgTvmVl7WylzDjrflneWnI8/:GjLqV0ttZnX/CT0pDvflnekI8
Score

10^/10

gink discovery persistence worm
- Gink
  worm gink
- Gink family
  gink
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ginkdiscoverypersistenceworm

behavioral2

ginkdiscoverypersistenceworm