General
- Target clink.1.9.27.83514e.zip
- Size 3.8MB
- Sample260625-wv7bead141
- SHA256 c035bd8123c52c78c5a1b9c732c7fcc2e81031b1582f2a3ec7246164270e0f65
Malware Config
Targets
-
- Target clink.bat
- Size 1KB
- SHA256 8ce0dab1564dbbc1c5d0bb2984ae7c89986391fe32e2d8d9128e24b13c5b778d
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
- Target clink.html
- Size 1.3MB
- SHA256 0441850de6edeae437bb4f1f0ac685880a0101fe3da98dc48e85cf405d369dd2
Score4/10 -
- Target clink_arm64.exe
- Size 16KB
- SHA256 3b8bdc020dae22fe255b843130e7cb8a6e52c82e9dfcbc23255124d96044ff3a
Score1/10 -
- Target clink_dll_arm64.dll
- Size 2.7MB
- SHA256 2f59cd839fa9f87d2a4ee07224a29c90dd0cb9e268e862f9e7fa513868f6ebce
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target clink_dll_x64.dll
- Size 2.8MB
- SHA256 e732b96c89e16e5a291ce26215928fa797c6ebb187679ff99eaaa9efd636bf5e
Score1/10 -
- Target clink_dll_x86.dll
- Size 2.2MB
- SHA256 469abb7c8eff08b4079e64fbe0ef72f7419f74665bce94bb26b65ae2f25af524
Score6/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target clink_x64.exe
- Size 16KB
- SHA256 cc1db1961ae7adf657ed7a775fac16f94f4332f820f96d1d7e3d8e948769b363
Score1/10 -
- Target clink_x86.exe
- Size 16KB
- SHA256 4e3612477102b7021050a14eead3f868d3987030410baae39cf28c82926618a0
Score3/10 -
- Target themes/4-bit Enhanced Defaults.clinktheme
- Size 1KB
- SHA256 20b0f61ffe34e3ba8b6422e2a6be8bbe5a58913cb5df12e62b2f0af029216e51
Score1/10 -
- Target themes/Antares.clinkprompt
- Size 23KB
- SHA256 aa857b55deab2a7e704d168c6d0c3f97047c2b17cdf216227b69dd783b4113d3
Score3/10 -
- Target themes/Dracula.clinktheme
- Size 1KB
- SHA256 8400084650e409302f84629815b7cb0c13e15b81a55fc856a72346fd32a3527b
Score1/10 -
- Target themes/Enhanced Defaults.clinktheme
- Size 1KB
- SHA256 2c3105e81a4e887a8f00008628a11102f17d3a684189a71aab381614c938ef4b
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target themes/Headline.clinkprompt
- Size 23KB
- SHA256 351581f87fd4e552644026f5ba36f593f09e29a28a9e0d77e303e307584453bd
Score3/10 -
- Target themes/Plain.clinktheme
- Size 1KB
- SHA256 6e63901094a309b2e3079d98950d0c488aba00b9694da76bfa3b0768b574425d
Score1/10 -
- Target themes/Solarized Dark.clinktheme
- Size 2KB
- SHA256 3ca3ad89fbf8507fc60c025d81239e51c9c244bfdd9bde272ebee904b0ad1d81
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target themes/Solarized Light.clinktheme
- Size 2KB
- SHA256 374bcdcf8de002f843ed7e7f84058fae29a0476cd3e0315c306b229040dc281c
Score1/10