General

  • Target

    Rust Hack.exe

  • Size

    7.0MB

  • Sample

    230711-kqawvsha4z

  • MD5

    a3c7d3b14f27d4426e9b4f4c578b4af1

  • SHA1

    56422509d3cd442311e7961dabd6222697461e64

  • SHA256

    57aa4872adba9a733f5ce772f4a4bfd579210656323d000a44107a96ba736cdf

  • SHA512

    0de1ef356b5dae03760f47fc80cc4f6e467a9aef0839b400d545e182a204f630f6f5bab3872d880702061026621b0d04b5c86f58138819a7859f75e09322268b

  • SSDEEP

    98304:eoFcATF6PTOsDqB2NHFMrVQBB3S3en5IXkHt+07GNlf6NGnAC053zfVjOTHif:eoFNJ6PTOsDqQPmQ2W3807ElbACY8TC

Malware Config

Targets

    • Target

      Rust Hack.exe

    • Size

      7.0MB

    • MD5

      a3c7d3b14f27d4426e9b4f4c578b4af1

    • SHA1

      56422509d3cd442311e7961dabd6222697461e64

    • SHA256

      57aa4872adba9a733f5ce772f4a4bfd579210656323d000a44107a96ba736cdf

    • SHA512

      0de1ef356b5dae03760f47fc80cc4f6e467a9aef0839b400d545e182a204f630f6f5bab3872d880702061026621b0d04b5c86f58138819a7859f75e09322268b

    • SSDEEP

      98304:eoFcATF6PTOsDqB2NHFMrVQBB3S3en5IXkHt+07GNlf6NGnAC053zfVjOTHif:eoFNJ6PTOsDqQPmQ2W3807ElbACY8TC

    • Shurk

      Shurk is an infostealer, written in C++ which appeared in 2021.

    • Shurk Stealer payload

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Enterprise v6

Tasks