Overview

overview

10

Static

static

8

163d103bfa...92.exe

windows7-x64

10

163d103bfa...92.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    163d103bfa8a6496a4745f69d446760d1e02a512eec430977ee210bfc3072292

  • Size

    4.9MB

  • Sample

    221130-tjcljsha8s

  • MD5

    ab9608cc70be7bbd9c8b0c9ac6bbf46d

  • SHA1

    5b3abd2a15a3a28dc327a69913a742274b25fe53

  • SHA256

    163d103bfa8a6496a4745f69d446760d1e02a512eec430977ee210bfc3072292

  • SHA512

    437269bdc5d2a1cbddb375581a20e281a06c26b964b6cb3e6f6cf3f100937c5fe193919abb1abf6ddbdf377b0bfce2968683705bdeccb252922ff79d687a63f3

  • SSDEEP

    98304:aELQ9v+AOiHo3qU0ZZGdNPogjIrd09VBZLi/CaAwAkHOYqHSh+pUazu6Gdn10d:aEsZVI3q9rG3+GXP+ywJHCp/u5d10

Score
10/10
shurkinfostealerspywarestealervmprotect

Malware Config

Targets

    • Target

      163d103bfa8a6496a4745f69d446760d1e02a512eec430977ee210bfc3072292

    • Size

      4.9MB

    • MD5

      ab9608cc70be7bbd9c8b0c9ac6bbf46d

    • SHA1

      5b3abd2a15a3a28dc327a69913a742274b25fe53

    • SHA256

      163d103bfa8a6496a4745f69d446760d1e02a512eec430977ee210bfc3072292

    • SHA512

      437269bdc5d2a1cbddb375581a20e281a06c26b964b6cb3e6f6cf3f100937c5fe193919abb1abf6ddbdf377b0bfce2968683705bdeccb252922ff79d687a63f3

    • SSDEEP

      98304:aELQ9v+AOiHo3qU0ZZGdNPogjIrd09VBZLi/CaAwAkHOYqHSh+pUazu6Gdn10d:aEsZVI3q9rG3+GXP+ywJHCp/u5d10

    Score
    10/10
    shurkinfostealerspywarestealervmprotect

    • Shurk

      Shurk is an infostealer, written in C++ which appeared in 2021.

      infostealershurk

    • Shurk Stealer payload

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks