General

  • Target

    https://cdn.discordapp.com/attachments/1128717806037381271/1129729857631309824/HIFIXLauncher.zip

  • Sample

    230716-tws43aff72

Malware Config

Targets

    • Target

      https://cdn.discordapp.com/attachments/1128717806037381271/1129729857631309824/HIFIXLauncher.zip

    • Shurk

      Shurk is an infostealer, written in C++ which appeared in 2021.

    • Shurk Stealer payload

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Enterprise v6

Tasks