Overview

overview

10

Static

static

26e8e4ec16...22.exe

windows7-x64

10

26e8e4ec16...22.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    26e8e4ec167b6ab37ae7070e7dfccc0182e5987c914e55e043c5704dd8a36322

  • Size

    1.5MB

  • Sample

    221130-t7yhxsgd34

  • MD5

    624cc456a092da6c9e6743ae6c8e23ae

  • SHA1

    dce5d9d408802275eed56373aef0fd49053984e2

  • SHA256

    26e8e4ec167b6ab37ae7070e7dfccc0182e5987c914e55e043c5704dd8a36322

  • SHA512

    3e480419934d2c03e7499a9f79118638b6a8dd91ed744c08a5040c75a67ecd1d26cd64f6fba7070fcb32d2936991fd85e373fccd106d2dada9dbc599fbccbb11

  • SSDEEP

    12288:anjVXpKgCPfJ5joXK2LUxv7VNdr1GI1xc8a+FwEwCGgRhde12kVSC4jkS695Dn19:YCHJ57xpLpLc8mEwCxL3kz9pn

Score
10/10
shurkinfostealerspywarestealer

Malware Config

Targets

    • Target

      26e8e4ec167b6ab37ae7070e7dfccc0182e5987c914e55e043c5704dd8a36322

    • Size

      1.5MB

    • MD5

      624cc456a092da6c9e6743ae6c8e23ae

    • SHA1

      dce5d9d408802275eed56373aef0fd49053984e2

    • SHA256

      26e8e4ec167b6ab37ae7070e7dfccc0182e5987c914e55e043c5704dd8a36322

    • SHA512

      3e480419934d2c03e7499a9f79118638b6a8dd91ed744c08a5040c75a67ecd1d26cd64f6fba7070fcb32d2936991fd85e373fccd106d2dada9dbc599fbccbb11

    • SSDEEP

      12288:anjVXpKgCPfJ5joXK2LUxv7VNdr1GI1xc8a+FwEwCGgRhde12kVSC4jkS695Dn19:YCHJ57xpLpLc8mEwCxL3kz9pn

    Score
    10/10
    shurkinfostealerspywarestealer

    • Shurk

      Shurk is an infostealer, written in C++ which appeared in 2021.

      infostealershurk

    • Shurk Stealer payload

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks