Analysis
- max time kernel
157s - max time network
166s - platform
windows10-2004_x64 - resource
win10v2004-20240226-en - resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system - submitted
20/03/2024, 01:20
Behavioral task
behavioral1
Sample
d78f6e614c824121dfca6db7d69f2319.exe
Resource
win7-20240221-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
d78f6e614c824121dfca6db7d69f2319.exe
Resource
win10v2004-20240226-en
3 signatures
150 seconds
General
- Target d78f6e614c824121dfca6db7d69f2319.exe
- Size 472KB
- Sample240320-bqf87sdb84
- SHA256 8a548ac448370ff5c00b77e1f4592c9c0934087f729ee57f547e34e03792f2c1
- MD5 d78f6e614c824121dfca6db7d69f2319
- SHA1 084951271b3ab0292a9719a56463b7ff58db95ae
- SHA512 d7e58dac654e719f27133c0a097f88da90b4de12b65167af9b44605a81c77100fadfed30a7ab6eed019d995570649cd5e0d442093e2cdb615bc8ab9f0b10e17b
- SSDEEP 12288:769T4U4+vKZhrTko73ri3CXEiFqrVVSP4pJDalpS6Xq2EVGfdm:7WTkqKfrTko77i3CXEigVVSPrlpSy/
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Malware Config
Signatures
- Shurk
Shurk is an infostealer, written in C++ which appeared in 2021.
- Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
- Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 1484 d78f6e614c824121dfca6db7d69f2319.exe 1484 d78f6e614c824121dfca6db7d69f2319.exe