Analysis
-
max time kernel
145s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
27-12-2023 07:52
General
-
Target
a99146b239d8f7be6e7281460eb625ef.exe
-
Size
472KB
-
MD5
a99146b239d8f7be6e7281460eb625ef
-
SHA1
7ac0e23d8c1e6ade2d7eedf2bdcbf431967aa726
-
SHA256
702dc8fde667d79575a192cee0075d75b6c2266138896e529cdc08fdaaea440c
-
SHA512
255a6ee52c7e31bc9ce90d1d483763683461f7af55fa44d4049c420dc1ab95e753fe712abfe649fb199385ee82c7c2135ced5a0a8873a84ff8935403678584bd
-
SSDEEP
12288:769T4U4+vKZhrTko73ri3CXEiFqrVVSPVpJDalpS6Xq2EVvfdm:7WTkqKfrTko77i3CXEigVVSPwlpSy0
Score
10/10
Malware Config
Signatures
-
Shurk
Shurk is an infostealer, written in C++ which appeared in 2021.
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\a99146b239d8f7be6e7281460eb625ef.exe"C:\Users\Admin\AppData\Local\Temp\a99146b239d8f7be6e7281460eb625ef.exe"1⤵
- Suspicious behavior: EnumeratesProcesses