Analysis
-
max time kernel
4294181s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20220223-en -
submitted
09-03-2022 02:25
General
-
Target
e2e6f768fdd68fdead6a86e1ad0cd5a42380ddb2ce6c1f4522be21bd55b04041.exe
-
Size
6.1MB
-
MD5
6390386e7190cf0fb880d5b94d23cb5a
-
SHA1
e845dc8bbffbc1cff3a9d038a8c08bbd0d7aa7b0
-
SHA256
e2e6f768fdd68fdead6a86e1ad0cd5a42380ddb2ce6c1f4522be21bd55b04041
-
SHA512
90a7981a74c7ed73f9db3f1811749b3727a0ab8dc042311477517579ca9883d73a29b1edbfb1de532eb0bcbf6cbcb632a57414d64c28e070ec34d04cec676a41
Score
10/10
Malware Config
Signatures
-
Shurk
Shurk is an infostealer, written in C++ which appeared in 2021.
-
Shurk Stealer Payload 1 IoCs
-
VMProtect packed file 1 IoCs
Detects executables packed with VMProtect commercial packer.
-
Program crash 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\e2e6f768fdd68fdead6a86e1ad0cd5a42380ddb2ce6c1f4522be21bd55b04041.exe"C:\Users\Admin\AppData\Local\Temp\e2e6f768fdd68fdead6a86e1ad0cd5a42380ddb2ce6c1f4522be21bd55b04041.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1668 -s 1482⤵
- Program crash
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
6.1MB
-
Filesize
1.5MB