General

  • Target

    Launcher.exe

  • Size

    6.7MB

  • Sample

    230713-hj3xysge91

  • MD5

    334b9c941a4ea898d1ddba23b76073a7

  • SHA1

    6fb79f20ddcd534e872273c958b375e0cc955718

  • SHA256

    afa50c786124859078e051ae7bb6477d5799782da50cfe6ea9233fb80e88c4dc

  • SHA512

    8be5dfbfe6a1522a20a9c5119d5935bd9569ec00861e8376583431bd9a9b84fafef59359cf0bfcd13b6af1d6bc6fe426bb9bb28e1e0490ab76d8c036edaa8e9b

  • SSDEEP

    98304:iv9wyzNooScrRbKygP8oK8PuT0vK0boUz2sDwzKFpWS2r:i1woeoScrxKyKnKTT0vTbxzUzW2

Malware Config

Targets

    • Target

      Launcher.exe

    • Size

      6.7MB

    • MD5

      334b9c941a4ea898d1ddba23b76073a7

    • SHA1

      6fb79f20ddcd534e872273c958b375e0cc955718

    • SHA256

      afa50c786124859078e051ae7bb6477d5799782da50cfe6ea9233fb80e88c4dc

    • SHA512

      8be5dfbfe6a1522a20a9c5119d5935bd9569ec00861e8376583431bd9a9b84fafef59359cf0bfcd13b6af1d6bc6fe426bb9bb28e1e0490ab76d8c036edaa8e9b

    • SSDEEP

      98304:iv9wyzNooScrRbKygP8oK8PuT0vK0boUz2sDwzKFpWS2r:i1woeoScrxKyKnKTT0vTbxzUzW2

    • Shurk

      Shurk is an infostealer, written in C++ which appeared in 2021.

    • Shurk Stealer payload

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Enterprise v6

Tasks