General

  • Target

    https://github.com/AstralProgram2023/Valorant/releases/download/Valorant/Install.zip

  • Sample

    231207-z8qglaff84

Malware Config

Targets

    • Target

      https://github.com/AstralProgram2023/Valorant/releases/download/Valorant/Install.zip

    • Shurk

      Shurk is an infostealer, written in C++ which appeared in 2021.

    • Shurk Stealer payload

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Enterprise v15

Tasks