Overview

overview

10

Static

static

568d57010d...cb.exe

windows7_x64

10

568d57010d...cb.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    568d57010dccfb07b197bf77fbdc499c37d8addbc411da6e5725ea20714906cb

  • Size

    732KB

  • Sample

    220307-j734aseggn

  • MD5

    80a78957acf8c76491ec63b609047c13

  • SHA1

    f9baa60988ce6be300184a38903b353d590b6ded

  • SHA256

    568d57010dccfb07b197bf77fbdc499c37d8addbc411da6e5725ea20714906cb

  • SHA512

    3fe59945343eeab85817b03e00a4104458404bd9af7fd467d442ddf8b674365f5b8ddbdca0ca0b1d84a28839b028a9fc6d7efdca664db182544cd6164447cbce

Score
10/10
shurkinfostealerspywarestealer

Malware Config

Targets

    • Target

      568d57010dccfb07b197bf77fbdc499c37d8addbc411da6e5725ea20714906cb

    • Size

      732KB

    • MD5

      80a78957acf8c76491ec63b609047c13

    • SHA1

      f9baa60988ce6be300184a38903b353d590b6ded

    • SHA256

      568d57010dccfb07b197bf77fbdc499c37d8addbc411da6e5725ea20714906cb

    • SHA512

      3fe59945343eeab85817b03e00a4104458404bd9af7fd467d442ddf8b674365f5b8ddbdca0ca0b1d84a28839b028a9fc6d7efdca664db182544cd6164447cbce

    Score
    10/10
    shurkinfostealerspywarestealer

    • Shurk

      Shurk is an infostealer, written in C++ which appeared in 2021.

      infostealershurk

    • Shurk Stealer Payload

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks