Overview

overview

10

Static

static

794c23dd8f...bf.exe

windows7_x64

10

794c23dd8f...bf.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    794c23dd8f2c86e3fb263e9e3f615551ef3a1183e7dc99e9eeea3faee47453bf

  • Size

    731KB

  • Sample

    220320-dmyp7affh4

  • MD5

    b9e1489d3bf19c77c3460a06169adc61

  • SHA1

    686257133c5e52b71a864646faeb6e4b21e651e3

  • SHA256

    794c23dd8f2c86e3fb263e9e3f615551ef3a1183e7dc99e9eeea3faee47453bf

  • SHA512

    de38d10d56a6ab283bd19008dbc35873ffc8d6651be07cb36706a519b5d200586e202a5e2e741ccbfcf8d5a56ba7baa596bc8776e57d31f142512f0f52baa6dc

Score
10/10
shurkinfostealerspywarestealer

Malware Config

Targets

    • Target

      794c23dd8f2c86e3fb263e9e3f615551ef3a1183e7dc99e9eeea3faee47453bf

    • Size

      731KB

    • MD5

      b9e1489d3bf19c77c3460a06169adc61

    • SHA1

      686257133c5e52b71a864646faeb6e4b21e651e3

    • SHA256

      794c23dd8f2c86e3fb263e9e3f615551ef3a1183e7dc99e9eeea3faee47453bf

    • SHA512

      de38d10d56a6ab283bd19008dbc35873ffc8d6651be07cb36706a519b5d200586e202a5e2e741ccbfcf8d5a56ba7baa596bc8776e57d31f142512f0f52baa6dc

    Score
    10/10
    shurkinfostealerspywarestealer

    • Shurk

      Shurk is an infostealer, written in C++ which appeared in 2021.

      infostealershurk

    • Shurk Stealer Payload

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks