General

  • Target

    9c07b15fdffb8da8cc7262c95f913e5f97db2a024377a1945c827fffd7b3f25f

  • Size

    3.9MB

  • Sample

    220320-a3z2eadcfl

  • MD5

    cd024373c964b18ab9fd7974a1e494fa

  • SHA1

    bb185ebb6e70038a90595f94dac03ee9217aa026

  • SHA256

    9c07b15fdffb8da8cc7262c95f913e5f97db2a024377a1945c827fffd7b3f25f

  • SHA512

    3832fc4d35454bf15a57dd75299248b057ef64b3950e5632b7165bdaff9f94cafdb199bd75fbae63bf0119b840ddeeec97c2253bb94811ff8651788be5d0b6a6

Score
10/10

Malware Config

Targets

    • Target

      9c07b15fdffb8da8cc7262c95f913e5f97db2a024377a1945c827fffd7b3f25f

    • Size

      3.9MB

    • MD5

      cd024373c964b18ab9fd7974a1e494fa

    • SHA1

      bb185ebb6e70038a90595f94dac03ee9217aa026

    • SHA256

      9c07b15fdffb8da8cc7262c95f913e5f97db2a024377a1945c827fffd7b3f25f

    • SHA512

      3832fc4d35454bf15a57dd75299248b057ef64b3950e5632b7165bdaff9f94cafdb199bd75fbae63bf0119b840ddeeec97c2253bb94811ff8651788be5d0b6a6

    Score
    10/10
    • Shurk

      Shurk is an infostealer, written in C++ which appeared in 2021.

    • Shurk Stealer Payload

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks