shurk | 77f8baaeaf504f6e72a5f8698297e9cccd4f3b13d6848a746a9f3b1cfe95e0bc

Analysis

max time kernel
130s
max time network
46s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
19-09-2022 10:09

Target

77f8baaeaf504f6e72a5f8698297e9cccd4f3b13d6848a746a9f3b1cfe95e0bc.exe
Size

371KB
MD5

9aa17d9ab2b1819c1ec113a20d4f776e
SHA1

06b1b4435df099fbec480cfcd7a11828be756902
SHA256

77f8baaeaf504f6e72a5f8698297e9cccd4f3b13d6848a746a9f3b1cfe95e0bc
SHA512

eec24fdc836359f00a8fcb90a8e98ead820fdf32a1e09728fb36f8ea5ad1eaa9aed04c50341a537eec74c9c5469465b9f42d07497c52f3b47e7dfb9f70e6ac84
SSDEEP

6144:k9RANfViL+L0tKHNLlbUH4hbP2DsEVhVL5u1uz/QyY830vaBr:IANfVG+L6Kt2HSbuDs2zdu1IdYcQa

Score

10^/10

shurk infostealer

Shurk
Shurk is an infostealer, written in C++ which appeared in 2021.
infostealer shurk

Drops desktop.ini file(s) 2 IoCs

description	ioc	Process
File created	C:\Users\Admin\AppData\Local\Temp\desktop.ini	77f8baaeaf504f6e72a5f8698297e9cccd4f3b13d6848a746a9f3b1cfe95e0bc.exe
File opened for modification	C:\Users\Admin\AppData\Local\Temp\desktop.ini	77f8baaeaf504f6e72a5f8698297e9cccd4f3b13d6848a746a9f3b1cfe95e0bc.exe

C:\Users\Admin\AppData\Local\Temp\77f8baaeaf504f6e72a5f8698297e9cccd4f3b13d6848a746a9f3b1cfe95e0bc.exe
"C:\Users\Admin\AppData\Local\Temp\77f8baaeaf504f6e72a5f8698297e9cccd4f3b13d6848a746a9f3b1cfe95e0bc.exe"
1⤵
- Drops desktop.ini file(s)
PID:1340