Overview

overview

10

Static

static

10

e2e6f768fd...41.exe

windows7_x64

10

e2e6f768fd...41.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e2e6f768fdd68fdead6a86e1ad0cd5a42380ddb2ce6c1f4522be21bd55b04041

  • Size

    6.1MB

  • Sample

    220309-cwn2nsfbfn

  • MD5

    6390386e7190cf0fb880d5b94d23cb5a

  • SHA1

    e845dc8bbffbc1cff3a9d038a8c08bbd0d7aa7b0

  • SHA256

    e2e6f768fdd68fdead6a86e1ad0cd5a42380ddb2ce6c1f4522be21bd55b04041

  • SHA512

    90a7981a74c7ed73f9db3f1811749b3727a0ab8dc042311477517579ca9883d73a29b1edbfb1de532eb0bcbf6cbcb632a57414d64c28e070ec34d04cec676a41

Score
10/10
shurkinfostealerspywarestealervmprotect

Malware Config

Targets

    • Target

      e2e6f768fdd68fdead6a86e1ad0cd5a42380ddb2ce6c1f4522be21bd55b04041

    • Size

      6.1MB

    • MD5

      6390386e7190cf0fb880d5b94d23cb5a

    • SHA1

      e845dc8bbffbc1cff3a9d038a8c08bbd0d7aa7b0

    • SHA256

      e2e6f768fdd68fdead6a86e1ad0cd5a42380ddb2ce6c1f4522be21bd55b04041

    • SHA512

      90a7981a74c7ed73f9db3f1811749b3727a0ab8dc042311477517579ca9883d73a29b1edbfb1de532eb0bcbf6cbcb632a57414d64c28e070ec34d04cec676a41

    Score
    10/10
    shurkinfostealervmprotectspywarestealer

    • Shurk

      Shurk is an infostealer, written in C++ which appeared in 2021.

      infostealershurk

    • Shurk Stealer Payload

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks