Overview

overview

10

Static

static

3

56ff6f46d2...18.exe

windows7-x64

10

56ff6f46d2...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    56ff6f46d2fff7f2bd274f47a034ad5b_JaffaCakes118

  • Size

    269KB

  • Sample

    240718-mngbzavbjn

  • MD5

    56ff6f46d2fff7f2bd274f47a034ad5b

  • SHA1

    6b906efc64955e8e5ddb95437535bb05f2e8ddce

  • SHA256

    e57add8cb2755528b791b3b56de4db9bc1ce882a8f3acb83bc96a748e8675806

  • SHA512

    5ea996f4e18a05136ec1ba76d7682431b135d7370bf87fd31aa72fa7ac5009799aa5d371590cb5eeaa2e09e2015891edd7cadfa457d8b63aad3ddcf747865bfb

  • SSDEEP

    6144:1q2IfhRSli2Pw1KUqiuIwPzn09JipIDO71MVY4bvH5VccgjLABM11Ybhw9EP4hQv:I/Sli2Pw1KU1uIwPzn09g4OpMVY4bvET

Score
10/10
shurkinfostealer

Malware Config

Targets

    • Target

      56ff6f46d2fff7f2bd274f47a034ad5b_JaffaCakes118

    • Size

      269KB

    • MD5

      56ff6f46d2fff7f2bd274f47a034ad5b

    • SHA1

      6b906efc64955e8e5ddb95437535bb05f2e8ddce

    • SHA256

      e57add8cb2755528b791b3b56de4db9bc1ce882a8f3acb83bc96a748e8675806

    • SHA512

      5ea996f4e18a05136ec1ba76d7682431b135d7370bf87fd31aa72fa7ac5009799aa5d371590cb5eeaa2e09e2015891edd7cadfa457d8b63aad3ddcf747865bfb

    • SSDEEP

      6144:1q2IfhRSli2Pw1KUqiuIwPzn09JipIDO71MVY4bvH5VccgjLABM11Ybhw9EP4hQv:I/Sli2Pw1KU1uIwPzn09g4OpMVY4bvET

    Score
    10/10
    shurkinfostealer

    • Shurk

      Shurk is an infostealer, written in C++ which appeared in 2021.

      infostealershurk

    • Drops file in Drivers directory

    • Loads dropped DLL

    • Drops desktop.ini file(s)

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks