Overview

overview

10

Static

static

10

82bf6a1917...d2.exe

windows7_x64

10

82bf6a1917...d2.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    82bf6a19170c4f0f7499b65826bd529bbd5c5ca4c9de6aef795ee8caf92a40d2

  • Size

    5.5MB

  • Sample

    220328-q8fsqaegcm

  • MD5

    110828c3586e434a516028fd3c4aec01

  • SHA1

    5589cb49122f5ac9abf135641f1781219fe2e508

  • SHA256

    82bf6a19170c4f0f7499b65826bd529bbd5c5ca4c9de6aef795ee8caf92a40d2

  • SHA512

    17cab8f161db27c1028ac27cdecf35b216bfbc1e6babd6175bdd740d69b48e970060d22f0b8bf3cafb2717665c727b0cff44b1e3f8040f1a3a6b61a923ef0e27

Score
10/10
shurkinfostealerspywarestealervmprotect

Malware Config

Targets

    • Target

      82bf6a19170c4f0f7499b65826bd529bbd5c5ca4c9de6aef795ee8caf92a40d2

    • Size

      5.5MB

    • MD5

      110828c3586e434a516028fd3c4aec01

    • SHA1

      5589cb49122f5ac9abf135641f1781219fe2e508

    • SHA256

      82bf6a19170c4f0f7499b65826bd529bbd5c5ca4c9de6aef795ee8caf92a40d2

    • SHA512

      17cab8f161db27c1028ac27cdecf35b216bfbc1e6babd6175bdd740d69b48e970060d22f0b8bf3cafb2717665c727b0cff44b1e3f8040f1a3a6b61a923ef0e27

    Score
    10/10
    shurkinfostealerspywarestealervmprotect

    • Shurk

      Shurk is an infostealer, written in C++ which appeared in 2021.

      infostealershurk

    • Shurk Stealer Payload

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks