Analysis
- max time kernel
145s - max time network
154s - platform
windows10-2004_x64 - resource
win10v2004-20231215-en - resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system - submitted
27/12/2023, 07:52
Behavioral task
behavioral1
Sample
a99146b239d8f7be6e7281460eb625ef.exe
Resource
win7-20231129-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
a99146b239d8f7be6e7281460eb625ef.exe
Resource
win10v2004-20231215-en
3 signatures
150 seconds
General
- Target a99146b239d8f7be6e7281460eb625ef.exe
- Size 472KB
- Sample231227-jqv2csdeej
- SHA256 702dc8fde667d79575a192cee0075d75b6c2266138896e529cdc08fdaaea440c
- MD5 a99146b239d8f7be6e7281460eb625ef
- SHA1 7ac0e23d8c1e6ade2d7eedf2bdcbf431967aa726
- SHA512 255a6ee52c7e31bc9ce90d1d483763683461f7af55fa44d4049c420dc1ab95e753fe712abfe649fb199385ee82c7c2135ced5a0a8873a84ff8935403678584bd
- SSDEEP 12288:769T4U4+vKZhrTko73ri3CXEiFqrVVSPVpJDalpS6Xq2EVvfdm:7WTkqKfrTko77i3CXEigVVSPwlpSy0
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Malware Config
Signatures
- Shurk
Shurk is an infostealer, written in C++ which appeared in 2021.
- Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
- Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 3952 a99146b239d8f7be6e7281460eb625ef.exe 3952 a99146b239d8f7be6e7281460eb625ef.exe