Overview

overview

10

Static

static

02dc23d65a...0e.exe

windows7_x64

10

02dc23d65a...0e.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    02dc23d65a2d31b758defd3f43d5ba64dce3229ff4cdbf9cec5e63915ba4d20e

  • Size

    732KB

  • Sample

    220306-zcsl3segf6

  • MD5

    05e7d8ed8b7301e8e4bf2a08aeef2e0a

  • SHA1

    6b51a2ee1e058167de7877c4a6c4a6d2e1bed711

  • SHA256

    02dc23d65a2d31b758defd3f43d5ba64dce3229ff4cdbf9cec5e63915ba4d20e

  • SHA512

    8eb45f9a947e51d8c6f4c76b04962c67df2b3b843975cc86231e0ad00ee3dcd7dcfdfdc97331ccf2900b76e0c619d4d4d8b73ffe17261b3fa297b3836b8be335

Score
10/10
shurkinfostealerspywarestealer

Malware Config

Targets

    • Target

      02dc23d65a2d31b758defd3f43d5ba64dce3229ff4cdbf9cec5e63915ba4d20e

    • Size

      732KB

    • MD5

      05e7d8ed8b7301e8e4bf2a08aeef2e0a

    • SHA1

      6b51a2ee1e058167de7877c4a6c4a6d2e1bed711

    • SHA256

      02dc23d65a2d31b758defd3f43d5ba64dce3229ff4cdbf9cec5e63915ba4d20e

    • SHA512

      8eb45f9a947e51d8c6f4c76b04962c67df2b3b843975cc86231e0ad00ee3dcd7dcfdfdc97331ccf2900b76e0c619d4d4d8b73ffe17261b3fa297b3836b8be335

    Score
    10/10
    shurkinfostealerspywarestealer

    • Shurk

      Shurk is an infostealer, written in C++ which appeared in 2021.

      infostealershurk

    • Shurk Stealer Payload

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks