Analysis
-
max time kernel
142s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-en-20220113 -
submitted
09-03-2022 02:25
General
-
Target
e2e6f768fdd68fdead6a86e1ad0cd5a42380ddb2ce6c1f4522be21bd55b04041.exe
-
Size
6.1MB
-
MD5
6390386e7190cf0fb880d5b94d23cb5a
-
SHA1
e845dc8bbffbc1cff3a9d038a8c08bbd0d7aa7b0
-
SHA256
e2e6f768fdd68fdead6a86e1ad0cd5a42380ddb2ce6c1f4522be21bd55b04041
-
SHA512
90a7981a74c7ed73f9db3f1811749b3727a0ab8dc042311477517579ca9883d73a29b1edbfb1de532eb0bcbf6cbcb632a57414d64c28e070ec34d04cec676a41
Score
10/10
Malware Config
Signatures
-
Shurk
Shurk is an infostealer, written in C++ which appeared in 2021.
-
Shurk Stealer Payload 2 IoCs
-
VMProtect packed file 2 IoCs
Detects executables packed with VMProtect commercial packer.
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Suspicious behavior: EnumeratesProcesses 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\e2e6f768fdd68fdead6a86e1ad0cd5a42380ddb2ce6c1f4522be21bd55b04041.exe"C:\Users\Admin\AppData\Local\Temp\e2e6f768fdd68fdead6a86e1ad0cd5a42380ddb2ce6c1f4522be21bd55b04041.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
6.1MB
-
Filesize
6.1MB