Overview

overview

10

Static

static

10

7288587d69...8f.exe

windows7_x64

10

7288587d69...8f.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7288587d69860d8b9567b6cb411b1cb134a177c7c5e49d0c8cccac3f709dcf8f

  • Size

    6.1MB

  • Sample

    220427-vzvyhaagdq

  • MD5

    a5404c0083177484a60748e3d3a73f11

  • SHA1

    653f556af689af89e86b322af5af46b33f9ddbda

  • SHA256

    7288587d69860d8b9567b6cb411b1cb134a177c7c5e49d0c8cccac3f709dcf8f

  • SHA512

    160dc9b02c45c4cdf09bed2b623d62994047e040ef22eb43ec496daa2b498c75780c2814b800c1421736d677d52a35acf7b144a3b274a674a627a87a91559368

Score
10/10
shurkinfostealerspywarestealervmprotect

Malware Config

Targets

    • Target

      7288587d69860d8b9567b6cb411b1cb134a177c7c5e49d0c8cccac3f709dcf8f

    • Size

      6.1MB

    • MD5

      a5404c0083177484a60748e3d3a73f11

    • SHA1

      653f556af689af89e86b322af5af46b33f9ddbda

    • SHA256

      7288587d69860d8b9567b6cb411b1cb134a177c7c5e49d0c8cccac3f709dcf8f

    • SHA512

      160dc9b02c45c4cdf09bed2b623d62994047e040ef22eb43ec496daa2b498c75780c2814b800c1421736d677d52a35acf7b144a3b274a674a627a87a91559368

    Score
    10/10
    shurkinfostealerspywarestealervmprotect

    • Shurk

      Shurk is an infostealer, written in C++ which appeared in 2021.

      infostealershurk

    • Shurk Stealer Payload

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks