General
- Target clink.1.9.28.ae0f63.zip
- Size 3.8MB
- Sample260701-ap2cbacz5s
- SHA256 451b8f0fcd5efb64fc1e417813c6deb8c51451dc913a009e442657849cc4b946
Malware Config
Targets
-
- Target clink.bat
- Size 1KB
- SHA256 8ce0dab1564dbbc1c5d0bb2984ae7c89986391fe32e2d8d9128e24b13c5b778d
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target clink.html
- Size 1.3MB
- SHA256 0a1f73251f00c996bac566c966717de083fd5454f08dc68e12b92ee1f743b3d8
Score4/10 -
- Target clink_arm64.exe
- Size 16KB
- SHA256 fee7ad58a83f2c61d5a15a182b874cd3204c0acfab73875f6eaf61122cd8b59a
Score1/10 -
- Target clink_dll_arm64.dll
- Size 2.7MB
- SHA256 6ec20f415e67a7277c02e54716ef6f1737afdac2a8d8c2ed043379a1456858e6
Score1/10 -
- Target clink_dll_x64.dll
- Size 2.8MB
- SHA256 b3801254e53dbaf0bad0570ea19260142005f0518edfe77faf3892c7941f5089
Score1/10 -
- Target clink_dll_x86.dll
- Size 2.2MB
- SHA256 551ea743831a48d3957342755056dc7322c3d5867ffa19ee50e75d4bff678ad2
Score6/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target clink_x64.exe
- Size 16KB
- SHA256 aec92ce9392dd7cfb293f1bc1614c9e763ab7571d8c1f4c051b7b38c1cf79b0a
Score6/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target clink_x86.exe
- Size 16KB
- SHA256 e30a0c7320d9b779fdbca63dbc68d80764fea404e02b17094bb47304d430e8eb
Score6/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target themes/4-bit Enhanced Defaults.clinktheme
- Size 1KB
- SHA256 20b0f61ffe34e3ba8b6422e2a6be8bbe5a58913cb5df12e62b2f0af029216e51
Score1/10 -
- Target themes/Antares.clinkprompt
- Size 23KB
- SHA256 aa857b55deab2a7e704d168c6d0c3f97047c2b17cdf216227b69dd783b4113d3
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target themes/Dracula.clinktheme
- Size 1KB
- SHA256 8400084650e409302f84629815b7cb0c13e15b81a55fc856a72346fd32a3527b
Score1/10 -
- Target themes/Enhanced Defaults.clinktheme
- Size 1KB
- SHA256 2c3105e81a4e887a8f00008628a11102f17d3a684189a71aab381614c938ef4b
Score1/10 -
- Target themes/Headline.clinkprompt
- Size 23KB
- SHA256 351581f87fd4e552644026f5ba36f593f09e29a28a9e0d77e303e307584453bd
Score3/10 -
- Target themes/Plain.clinktheme
- Size 1KB
- SHA256 6e63901094a309b2e3079d98950d0c488aba00b9694da76bfa3b0768b574425d
Score1/10 -
- Target themes/Solarized Dark.clinktheme
- Size 2KB
- SHA256 3ca3ad89fbf8507fc60c025d81239e51c9c244bfdd9bde272ebee904b0ad1d81
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target themes/Solarized Light.clinktheme
- Size 2KB
- SHA256 374bcdcf8de002f843ed7e7f84058fae29a0476cd3e0315c306b229040dc281c
Score1/10