Overview

overview

10

Static

static

8

f85c9bfbe2...64.exe

windows7-x64

10

f85c9bfbe2...64.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f85c9bfbe269722f217b68606bc1971cc282c3669200707747e9bd331783e864

  • Size

    5.6MB

  • Sample

    230129-sqlmcsde6s

  • MD5

    a2269d009808c714ae493e581219c6d2

  • SHA1

    478d802989e9a9b758dc6fce38921d6039e3d1a5

  • SHA256

    f85c9bfbe269722f217b68606bc1971cc282c3669200707747e9bd331783e864

  • SHA512

    b7d7f8599c366558e2900f2b82945a54b4283c4dbd036db44365609886a099ffc13e7b9510893208e1cb2443c169ff1702a2a5509c23c862c422af4cbd24ed84

  • SSDEEP

    98304:PjfA9zgtWx8p2UqIHpda3WATWY8peWxoZ5iTI4b4/eGyjFlSy/fmOfRf:7UQE8cUP4RTHseWoHCFc/ebjHt/fmOfJ

Score
10/10
shurkinfostealerspywarestealervmprotect

Malware Config

Targets

    • Target

      f85c9bfbe269722f217b68606bc1971cc282c3669200707747e9bd331783e864

    • Size

      5.6MB

    • MD5

      a2269d009808c714ae493e581219c6d2

    • SHA1

      478d802989e9a9b758dc6fce38921d6039e3d1a5

    • SHA256

      f85c9bfbe269722f217b68606bc1971cc282c3669200707747e9bd331783e864

    • SHA512

      b7d7f8599c366558e2900f2b82945a54b4283c4dbd036db44365609886a099ffc13e7b9510893208e1cb2443c169ff1702a2a5509c23c862c422af4cbd24ed84

    • SSDEEP

      98304:PjfA9zgtWx8p2UqIHpda3WATWY8peWxoZ5iTI4b4/eGyjFlSy/fmOfRf:7UQE8cUP4RTHseWoHCFc/ebjHt/fmOfJ

    Score
    10/10
    shurkinfostealerspywarestealervmprotect

    • Shurk

      Shurk is an infostealer, written in C++ which appeared in 2021.

      infostealershurk

    • Shurk Stealer payload

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks