Overview

overview

10

Static

static

8

075a234045...1e.exe

windows7-x64

10

075a234045...1e.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    075a2340456e0912827ae012e4e41e0eb38fb0198ae0a72cfaeededb36aef81e

  • Size

    5.7MB

  • Sample

    230129-w6fmtsad6z

  • MD5

    9c71ce719407ea94cc5b5741c03f6d02

  • SHA1

    a09529f3e357278121041c75329fe5185c04754a

  • SHA256

    075a2340456e0912827ae012e4e41e0eb38fb0198ae0a72cfaeededb36aef81e

  • SHA512

    649cb9a559ecb7d865434f072a5ee3d450ca64cc05ee6a94c8331091f0cce5d84cac4bf07a64234b5272b68beb470a1df0d1e40336ba3269f7c1c3656c3040d7

  • SSDEEP

    98304:z2/EokcNnTTR1YiuH5G+0m/MGDtRYX6Yet5xHPoGAVIhbJScCYv+hJsiYrg6C4nX:yso7nTTFeh/MIrg6/vxvfAVI6Hsim/LX

Score
10/10
shurkinfostealerspywarestealervmprotect

Malware Config

Targets

    • Target

      075a2340456e0912827ae012e4e41e0eb38fb0198ae0a72cfaeededb36aef81e

    • Size

      5.7MB

    • MD5

      9c71ce719407ea94cc5b5741c03f6d02

    • SHA1

      a09529f3e357278121041c75329fe5185c04754a

    • SHA256

      075a2340456e0912827ae012e4e41e0eb38fb0198ae0a72cfaeededb36aef81e

    • SHA512

      649cb9a559ecb7d865434f072a5ee3d450ca64cc05ee6a94c8331091f0cce5d84cac4bf07a64234b5272b68beb470a1df0d1e40336ba3269f7c1c3656c3040d7

    • SSDEEP

      98304:z2/EokcNnTTR1YiuH5G+0m/MGDtRYX6Yet5xHPoGAVIhbJScCYv+hJsiYrg6C4nX:yso7nTTFeh/MIrg6/vxvfAVI6Hsim/LX

    Score
    10/10
    shurkinfostealerspywarestealervmprotect

    • Shurk

      Shurk is an infostealer, written in C++ which appeared in 2021.

      infostealershurk

    • Shurk Stealer payload

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks