Overview

overview

10

Static

static

3

AIMr.exe

windows7-x64

7

AIMr.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    36s
  • max time network
    41s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    11/02/2024, 09:27

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    AIMr.exe
  • Size 8.2MB
  • Sample240211-levmkaef7t
  • SHA256 0d1bb97f63756326bb8e7a4c5b071e8a753d0d0f470804b76ef20d6f80a6fd2b
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
shurkinfostealer

Malware Config

Signatures

  • Shurk

    Shurk is an infostealer, written in C++ which appeared in 2021.

    infostealershurk
  • Loads dropped DLL 12 IoCs
  • Legitimate hosting services abused for malware hosting/C2 1 TTPs 2 IoCs
  • Suspicious use of WriteProcessMemory 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\AIMr.exe
    "C:\Users\Admin\AppData\Local\Temp\AIMr.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:4832
    • C:\Users\Admin\AppData\Local\Temp\AIMr.exe
      "C:\Users\Admin\AppData\Local\Temp\AIMr.exe"
      2⤵
      • Loads dropped DLL
      PID:2132

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        VCRUNTIME140.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI48322\VCRUNTIME140.dll
        • Size 116KB
        • SHA256 4d292623516f65c80482081e62d5dadb759dc16e851de5db24c3cbb57b87db83
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _bz2.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI48322\_bz2.pyd
        • Size 82KB
        • SHA256 bd8621fcc901fa1de3961d93184f61ea71068c436794af2a4449738ccf949946
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _decimal.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI48322\_decimal.pyd
        • Size 247KB
        • SHA256 d4ae192bbd4627fc9487a2c1cd9869d1b461c20cfd338194e87f5cf882bbed12
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _hashlib.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI48322\_hashlib.pyd
        • Size 64KB
        • SHA256 6c50c9801a5caf0bb52b384f9a0d5a4aa182ca835f293a39e8999cf6edf2f087
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _lzma.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI48322\_lzma.pyd
        • Size 155KB
        • SHA256 22d10e2d6ad3e3ed3c49eb79ab69a81aaa9d16aeca7f948da2fe80877f106c16
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _socket.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI48322\_socket.pyd
        • Size 81KB
        • SHA256 24017d664af20ee3b89514539345caac83eca34825fcf066a23e8a4c99f73e6d
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _ssl.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI48322\_ssl.pyd
        • Size 173KB
        • SHA256 2b6f1b1ac47cb7878b62e8d6bb587052f86ca8145b05a261e855305b9ca3d36c
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-core-console-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI48322\api-ms-win-core-console-l1-1-0.dll
        • Size 13KB
        • SHA256 6439c3b78ee318397bb2ee2729a914826f9e58c8dec456ce74bc8cea1c41d060
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-core-datetime-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI48322\api-ms-win-core-datetime-l1-1-0.dll
        • Size 13KB
        • SHA256 9608c021164094322899e5799a86188891fa571a4e31b36888e256324c7d76bd
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-core-debug-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI48322\api-ms-win-core-debug-l1-1-0.dll
        • Size 13KB
        • SHA256 7009a34534c64708f00117345bf577611747351f723969b50db761defc9360f2
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-core-errorhandling-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI48322\api-ms-win-core-errorhandling-l1-1-0.dll
        • Size 13KB
        • SHA256 1b7f8add572d9cc81c2f5975230442240454dfa4ca047ba2b5b2b3ffb83a222d
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-core-file-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI48322\api-ms-win-core-file-l1-1-0.dll
        • Size 16KB
        • SHA256 1b580bcdd68c325aeb5852d811e926d8e35b0dcb080f7da5a8735c348b2bc8b4
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-core-file-l1-2-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI48322\api-ms-win-core-file-l1-2-0.dll
        • Size 13KB
        • SHA256 55565231aaefb87e36e20e8bc9e5f57a6ce60a91ffe2cc29711fb2df70f17560
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-core-file-l2-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI48322\api-ms-win-core-file-l2-1-0.dll
        • Size 13KB
        • SHA256 69d2e82663ec1be7cec2d20b82b353a7a4ac2b71474aa549b5308464273285ca
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-core-handle-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI48322\api-ms-win-core-handle-l1-1-0.dll
        • Size 13KB
        • SHA256 3b5fbf976aad4a3b7beb3caf9d19fefeff83cc6dae12de361821aea14fe5ba6c
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-core-heap-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI48322\api-ms-win-core-heap-l1-1-0.dll
        • Size 13KB
        • SHA256 e4b33b4da7d6df7e5b22268e7a9e989c38ff82df6833952bae7ddcf24b207241
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-core-interlocked-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI48322\api-ms-win-core-interlocked-l1-1-0.dll
        • Size 13KB
        • SHA256 ffda53d869f4f9a24ef0bd894254131eda1661d6618a489211091b567d8afcc3
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-core-libraryloader-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI48322\api-ms-win-core-libraryloader-l1-1-0.dll
        • Size 14KB
        • SHA256 8015281013e0b99d914676485f6f680dbb64a9b984b4aada2601764ce4f7cb67
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-core-localization-l1-2-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI48322\api-ms-win-core-localization-l1-2-0.dll
        • Size 15KB
        • SHA256 89faf112c004bf34f240b3b4fae6941316d3e9844d14cddbdfce4964ff410239
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-core-memory-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI48322\api-ms-win-core-memory-l1-1-0.dll
        • Size 13KB
        • SHA256 7d7e31d5535f56ef57d3c7638553a3a1bb5de8cb187822921b8cb6f528eff551
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-core-namedpipe-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI48322\api-ms-win-core-namedpipe-l1-1-0.dll
        • Size 13KB
        • SHA256 66413f9a31bd8a1771560657774b657927f033a21d1245267b2cb54005d08329
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-core-processenvironment-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI48322\api-ms-win-core-processenvironment-l1-1-0.dll
        • Size 14KB
        • SHA256 00f1d49a578ace2b0501e7379a1796a8a4c8af83f4d4068b3e972b35cf78087f
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-core-processthreads-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI48322\api-ms-win-core-processthreads-l1-1-0.dll
        • Size 15KB
        • SHA256 c2d6f753a3b459d22342a81250b6870f50bec9c3010dd103a69e0982b4ab007b
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-core-processthreads-l1-1-1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI48322\api-ms-win-core-processthreads-l1-1-1.dll
        • Size 13KB
        • SHA256 2756035ca5105caf7ab63ea7284c68403adc912bd08906bf5c18c7ff3b47ab5b
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-core-profile-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI48322\api-ms-win-core-profile-l1-1-0.dll
        • Size 12KB
        • SHA256 16fb96644f455cb9ed153b469f95243ad022ff1e9610e70bb035d5df7e171d6b
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-core-rtlsupport-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI48322\api-ms-win-core-rtlsupport-l1-1-0.dll
        • Size 13KB
        • SHA256 7a7aa4fe6e8ea3e3fa60dda5def854805df5e64356fa96c227ae9f8f75fa345a
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-core-string-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI48322\api-ms-win-core-string-l1-1-0.dll
        • Size 13KB
        • SHA256 5da892f59cd33f7479a31d22b3d97df4227785312c019eea5cf5f3b3509d84ce
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-core-synch-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI48322\api-ms-win-core-synch-l1-1-0.dll
        • Size 15KB
        • SHA256 4a8970c4961dc97da2646d9f6b9b453afbc5873ef79f2c5fd1d4e571427b67ff
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-core-synch-l1-2-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI48322\api-ms-win-core-synch-l1-2-0.dll
        • Size 13KB
        • SHA256 7879f4360087a3eb4cbe84776446abf2cf25ea4a1f1a4900174159c2c5fbf973
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-core-sysinfo-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI48322\api-ms-win-core-sysinfo-l1-1-0.dll
        • Size 14KB
        • SHA256 16f0eea13aa8927d613b45843793ad400249acda2a9352551c23c197cb9f306c
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-core-timezone-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI48322\api-ms-win-core-timezone-l1-1-0.dll
        • Size 13KB
        • SHA256 6c1c6936309f16a42801b3e69567269e3faf9f97455d7d1ca1aeac22d963b135
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-core-util-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI48322\api-ms-win-core-util-l1-1-0.dll
        • Size 13KB
        • SHA256 0bc65519bee8839501132032c55c8c4bb05bc662459343f82a00ab24d84d8fb0
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-crt-conio-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI48322\api-ms-win-crt-conio-l1-1-0.dll
        • Size 14KB
        • SHA256 4654b500f5d0bde0f22ddf1aae84b5b8cbadf6c61e3c0ce2809c8e223ecbf96c
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-crt-convert-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI48322\api-ms-win-crt-convert-l1-1-0.dll
        • Size 17KB
        • SHA256 2f2141ea4acbdfb3a150814b291c7e056469446a2823c9f3375fa60e8ce46f9b
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-crt-environment-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI48322\api-ms-win-crt-environment-l1-1-0.dll
        • Size 13KB
        • SHA256 6a96fec28fa3b8442ec1ef0a53864f82a5821403335725274e66a01acf2a604f
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-crt-filesystem-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI48322\api-ms-win-crt-filesystem-l1-1-0.dll
        • Size 15KB
        • SHA256 a698459f02100cc502e3a302b42e3ab5bcb082da81a1fade0c9ad2b55226a026
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-crt-heap-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI48322\api-ms-win-crt-heap-l1-1-0.dll
        • Size 14KB
        • SHA256 2cacc87a19c4e86275835b89b0c58eb6f65bd1e1e1544c2827da92995d36b373
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-crt-locale-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI48322\api-ms-win-crt-locale-l1-1-0.dll
        • Size 13KB
        • SHA256 cd7550cdbcee182523fc011011a748da982b09777978aba5d213e9d9b0a369d1
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-crt-math-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI48322\api-ms-win-crt-math-l1-1-0.dll
        • Size 22KB
        • SHA256 351babc124c553726b2fdca523db7c8a60a881781c8bd67ac5d86e1c990e836f
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-crt-process-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI48322\api-ms-win-crt-process-l1-1-0.dll
        • Size 14KB
        • SHA256 a8edd81a2987222230f43c8bcca9805bee0d5591bc9960513e80c4f4c6b2a74c
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-crt-runtime-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI48322\api-ms-win-crt-runtime-l1-1-0.dll
        • Size 17KB
        • SHA256 4cd39202449369b8d70fe9f52f320567334252f8bf2e0369919fd2ff46c1f6d8
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-crt-stdio-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI48322\api-ms-win-crt-stdio-l1-1-0.dll
        • Size 19KB
        • SHA256 a6437d15c89236ed7690ee177972d7460a5add80d38b724070b94806716fbbf6
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-crt-string-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI48322\api-ms-win-crt-string-l1-1-0.dll
        • Size 19KB
        • SHA256 0cda38eff2cb37c29b100f3ba308db2db31b724d344d3dc2f843124dca42a2cd
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-crt-time-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI48322\api-ms-win-crt-time-l1-1-0.dll
        • Size 15KB
        • SHA256 210ecbd606010a0858849736e044e8dcf58af15aa60abdc760161fa7546b3e31
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-crt-utility-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI48322\api-ms-win-crt-utility-l1-1-0.dll
        • Size 13KB
        • SHA256 9a9b6807f39a506f7141e80f8e2296856035c0c1a29da08c65c3faaf37da4749
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        base_library.zip
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI48322\base_library.zip
        • Size 1.3MB
        • SHA256 6d8cbdb4c6caf8baa7f805a64c85e0e0086a768cc50a4efe62eca815268c6530
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        libcrypto-3.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI48322\libcrypto-3.dll
        • Size 4.9MB
        • SHA256 2a234b5aa20c3faecf725bbb54fb33f3d94543f78fa7045408e905593e49960a
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        libssl-3.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI48322\libssl-3.dll
        • Size 771KB
        • SHA256 41ad1a04ca27a7959579e87fbbda87c93099616a64a0e66260c983381c5570d1
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        python312.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI48322\python312.dll
        • Size 3.6MB
        • SHA256 4b5e248bff82b4630741cd25dde37bf564231b4bcb668e6619eea47385f14024
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        python312.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI48322\python312.dll
        • Size 256KB
        • SHA256 136cbb2590f31e7b393f5b9e07aabb068a23d10b657fc65a9b75149c2220b969
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        select.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI48322\select.pyd
        • Size 29KB
        • SHA256 74cca85600e7c17ea6532b54842e26d3cae9181287cdf5a4a3c50af4dab785e5
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        ucrtbase.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI48322\ucrtbase.dll
        • Size 987KB
        • SHA256 a8f9a12b1b6374f84380090eb396630a3409c7ec3bdeee3930ac6ca6cebe423e
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        unicodedata.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI48322\unicodedata.pyd
        • Size 1.1MB
        • SHA256 2a50d629895a05b10a262acf333e7a4a31db5cb035b70d14d1a4be1c3e27d309
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download