General

  • Target

    14e3bedb83065443f19b1e5bfd91b20f681f8887ed7c1441a25c160c87f34e18

  • Size

    1.3MB

  • Sample

    221125-lwl2raha67

  • MD5

    54206c07a82332c8a41180fa260cf38b

  • SHA1

    d424d36f32690f22d53bd31410f47fa97efec7ab

  • SHA256

    14e3bedb83065443f19b1e5bfd91b20f681f8887ed7c1441a25c160c87f34e18

  • SHA512

    d1273b61571857de1b43158e343a80ea4ccdd03307ad2e917e14b773ec4410aa397b6bf458b387fc705b2b04fe60126b807a3f1a1e7fe12660b86c1267e5fa1d

  • SSDEEP

    24576:pN43s1uw4XvpXWcpWNC3wTRj765jYEkZUZaP4Pd882vu30NIs4jCMtE2+:CsYw4fpm453C65kEkZUAM8szsoE

Malware Config

Targets

    • Target

      14e3bedb83065443f19b1e5bfd91b20f681f8887ed7c1441a25c160c87f34e18

    • Size

      1.3MB

    • MD5

      54206c07a82332c8a41180fa260cf38b

    • SHA1

      d424d36f32690f22d53bd31410f47fa97efec7ab

    • SHA256

      14e3bedb83065443f19b1e5bfd91b20f681f8887ed7c1441a25c160c87f34e18

    • SHA512

      d1273b61571857de1b43158e343a80ea4ccdd03307ad2e917e14b773ec4410aa397b6bf458b387fc705b2b04fe60126b807a3f1a1e7fe12660b86c1267e5fa1d

    • SSDEEP

      24576:pN43s1uw4XvpXWcpWNC3wTRj765jYEkZUZaP4Pd882vu30NIs4jCMtE2+:CsYw4fpm453C65kEkZUAM8szsoE

    • Shurk

      Shurk is an infostealer, written in C++ which appeared in 2021.

    • Shurk Stealer payload

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v6

Tasks