Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    130s
  • max time network
    149s
  • platform
    windows10_x64
  • resource
    win10v20210408
  • submitted
    06/08/2021, 10:59 UTC

General

  • Target

    3dc83821af5e8c315cfe4c710e603bf776e866f99f41532dd280d411bc103725.exe

  • Size

    472KB

  • MD5

    74d9427d5f06e83790361ce7c2cadd31

  • SHA1

    608fc51e8b018264c8879528d9dd81bcd8319aa8

  • SHA256

    3dc83821af5e8c315cfe4c710e603bf776e866f99f41532dd280d411bc103725

  • SHA512

    c4b3bab00dca72d4d0539084f3fa91d8c4606ef816d12e100fe88274cc12f9aea5dc1d82d3b65c7a15900a3d16a59f6478327cf2edec7fbe10a509bca312f928

Malware Config

Signatures

  • Shurk

    Shurk is an infostealer, written in C++ which appeared in 2021.

  • Reads user/profile data of web browsers 2 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

  • Suspicious behavior: EnumeratesProcesses 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\3dc83821af5e8c315cfe4c710e603bf776e866f99f41532dd280d411bc103725.exe
    "C:\Users\Admin\AppData\Local\Temp\3dc83821af5e8c315cfe4c710e603bf776e866f99f41532dd280d411bc103725.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    PID:752

Network

    No results found
  • 193.124.64.30:2222
    3dc83821af5e8c315cfe4c710e603bf776e866f99f41532dd280d411bc103725.exe
    156 B
    3
  • 193.124.64.30:2222
    3dc83821af5e8c315cfe4c710e603bf776e866f99f41532dd280d411bc103725.exe
    156 B
    3
  • 193.124.64.30:2222
    3dc83821af5e8c315cfe4c710e603bf776e866f99f41532dd280d411bc103725.exe
    156 B
    3
  • 193.124.64.30:2222
    3dc83821af5e8c315cfe4c710e603bf776e866f99f41532dd280d411bc103725.exe
    156 B
    3
  • 193.124.64.30:2222
    3dc83821af5e8c315cfe4c710e603bf776e866f99f41532dd280d411bc103725.exe
    156 B
    3
  • 193.124.64.30:2222
    3dc83821af5e8c315cfe4c710e603bf776e866f99f41532dd280d411bc103725.exe
    156 B
    3
  • 193.124.64.30:2222
    3dc83821af5e8c315cfe4c710e603bf776e866f99f41532dd280d411bc103725.exe
    156 B
    3
No results found

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.