General
-
Target
fb1b85b57041bc462f876726f8a16659.exe
-
Size
6.6MB
-
Sample
230714-qectzaeh8y
-
MD5
fb1b85b57041bc462f876726f8a16659
-
SHA1
c2b93b37e4d2d770dc4c6b33882d9217aebe3729
-
SHA256
1d386f96ab141c7bd7dfb8dfe9e747143670996a7b3d5a4c224c34e8a5973379
-
SHA512
1ee64d93b2c36ba2d8ada0f67e7a0630408d5a5cf4ebbbb47dcbabc6d6e9b5e896ac96e902b56f5b0a7423e0da9a1703a213a6bf276b8d4d55b8da080548cfaf
-
SSDEEP
98304:F0NytytRQ+MK8dkb8BET69lUz2sDwzKFpWS2r:F0NytytRQ+D8dkbAEG9OzUzW2
Malware Config
Targets
-
-
Target
fb1b85b57041bc462f876726f8a16659.exe
-
Size
6.6MB
-
MD5
fb1b85b57041bc462f876726f8a16659
-
SHA1
c2b93b37e4d2d770dc4c6b33882d9217aebe3729
-
SHA256
1d386f96ab141c7bd7dfb8dfe9e747143670996a7b3d5a4c224c34e8a5973379
-
SHA512
1ee64d93b2c36ba2d8ada0f67e7a0630408d5a5cf4ebbbb47dcbabc6d6e9b5e896ac96e902b56f5b0a7423e0da9a1703a213a6bf276b8d4d55b8da080548cfaf
-
SSDEEP
98304:F0NytytRQ+MK8dkb8BET69lUz2sDwzKFpWS2r:F0NytytRQ+D8dkbAEG9OzUzW2
Score10/10-
Shurk
Shurk is an infostealer, written in C++ which appeared in 2021.
-
Shurk Stealer payload
-
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.
-
UPX packed file
Detects executables packed with UPX/modified UPX open source packer.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-