Overview

overview

10

Static

static

10

Aurora.exe

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Aurora.exe

  • Size

    25.9MB

  • Sample

    240612-dd14yszank

  • MD5

    fbf3377a2792a5c659b324758e1a3424

  • SHA1

    f6aec1d479dec9971c83f042dd641951edd4e05f

  • SHA256

    27ef1ed7a6cd92d08e23da1e80f3889fbab55b504e633d914983b69c17e2e7dc

  • SHA512

    67d092f5ef7c559f7b5eecb734e8b9c896a35ab354f3eb9ce98173a13b2a0ad303662267b705817028f2785530bcfecb6150e123a2ca22680b820503506c346d

  • SSDEEP

    196608:+QPY9mgGvkHEAsdtLRVRXgFqKQbEZxRHY:6M7sHEAEtLNXgFqxbEZxK

Score
10/10
aurorarhadamanthysshurkinfostealerstealer

Malware Config

Targets

    • Target

      Aurora.exe

    • Size

      25.9MB

    • MD5

      fbf3377a2792a5c659b324758e1a3424

    • SHA1

      f6aec1d479dec9971c83f042dd641951edd4e05f

    • SHA256

      27ef1ed7a6cd92d08e23da1e80f3889fbab55b504e633d914983b69c17e2e7dc

    • SHA512

      67d092f5ef7c559f7b5eecb734e8b9c896a35ab354f3eb9ce98173a13b2a0ad303662267b705817028f2785530bcfecb6150e123a2ca22680b820503506c346d

    • SSDEEP

      196608:+QPY9mgGvkHEAsdtLRVRXgFqKQbEZxRHY:6M7sHEAEtLNXgFqxbEZxK

    Score
    10/10
    aurorarhadamanthysshurkinfostealerstealer

    • Aurora

      Aurora is a crypto wallet stealer written in Golang.

      stealeraurora

    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

      stealerrhadamanthys

    • Shurk

      Shurk is an infostealer, written in C++ which appeared in 2021.

      infostealershurk

    • Shurk Stealer payload

    • Executes dropped EXE

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks