General

  • Target

    AIMr.zip

  • Size

    8.0MB

  • Sample

    240215-3gvtsacb27

  • MD5

    e696a2f748724c00dd2f01c66514d3fe

  • SHA1

    940a806cc6bb4a330481e61cbf382fbf3ef287ba

  • SHA256

    9c6dcc6bf46a2b8bb8e6a608a4028c51cbf36d6e0f5482f5beed92fcca95c682

  • SHA512

    58c31f0ec2d90fff151b1b32c4ac8b7a8829d83223b3eb20c54d3ddb81c4ea96262fdc09e29a24ed0344ed81bf708bde6cc5e654c8cfc715ec1b9abb63c35c0f

  • SSDEEP

    196608:GJIQejAt+rDkxZDow62nM9KFHak90OmaQYdaV0QLr2:oIg84how62nRF/0Om5Bz2

Malware Config

Targets

    • Target

      AIMr.exe

    • Size

      8.2MB

    • MD5

      8f77a83dcb36fe6788fa3524c25e3313

    • SHA1

      e22ed90845dd746e8f67aa2705d922c0891b7e00

    • SHA256

      fcda791a14b2d6dd0431ec1d0f0846e01b249f2ce2bbddd3a59ea573649d5770

    • SHA512

      193e1b71f6cfc76c49a5e5fcb8ca494a7b50e0cbf2f952cbd9eb67866cecc3e898e5186517f75f76672d5c486eed2238ef8a769cc21396eae123d052397fdd7d

    • SSDEEP

      196608:DtbvU1W903eV4QJ7MToEuGxgh858F0ibfULlgABfRk90Ql9:5mW+eGQJ7MTozGxu8C0ibfAi3n

    Score
    10/10
    • Shurk

      Shurk is an infostealer, written in C++ which appeared in 2021.

    • Loads dropped DLL

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks