Overview

overview

10

Static

static

bb09b23c49...94.exe

windows7_x64

10

bb09b23c49...94.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bb09b23c49593c6b6d2f8d83a7d4e5d430ebcf1f394d0bb6a6f7872f293a8394

  • Size

    731KB

  • Sample

    220319-pm82pshggl

  • MD5

    d18f7a8f7b293e333b46ec6f70eea26c

  • SHA1

    9470145dafae7b558782d90ce6e06f9e97dba8bc

  • SHA256

    bb09b23c49593c6b6d2f8d83a7d4e5d430ebcf1f394d0bb6a6f7872f293a8394

  • SHA512

    f47d4ab9e0ea4f38d20829563f3203bfc0749351d9fd99fd0b61993ecb947621ce943211da39cdc6c78a9154fde6595dcf9119e2beda5b8d3daecf317e6ba078

Score
10/10
shurkinfostealerspywarestealer

Malware Config

Targets

    • Target

      bb09b23c49593c6b6d2f8d83a7d4e5d430ebcf1f394d0bb6a6f7872f293a8394

    • Size

      731KB

    • MD5

      d18f7a8f7b293e333b46ec6f70eea26c

    • SHA1

      9470145dafae7b558782d90ce6e06f9e97dba8bc

    • SHA256

      bb09b23c49593c6b6d2f8d83a7d4e5d430ebcf1f394d0bb6a6f7872f293a8394

    • SHA512

      f47d4ab9e0ea4f38d20829563f3203bfc0749351d9fd99fd0b61993ecb947621ce943211da39cdc6c78a9154fde6595dcf9119e2beda5b8d3daecf317e6ba078

    Score
    10/10
    shurkinfostealerspywarestealer

    • Shurk

      Shurk is an infostealer, written in C++ which appeared in 2021.

      infostealershurk

    • Shurk Stealer Payload

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks