General

  • Target

    b0077e5f7d260be16e406d3e5993641c.exe

  • Size

    387KB

  • Sample

    210418-4xrnz5ezge

  • MD5

    b0077e5f7d260be16e406d3e5993641c

  • SHA1

    e0de42539db1aee89f4e863151a9cd27ebd00655

  • SHA256

    b2e0a2a4ee3ca452cd290a72cd11f0fe2e178ca8566badd578377fa211aa59a8

  • SHA512

    0a3dad4907830e110b0b65ec6457365eac5cad56302b801c02f44ed5b509d0f0ccf52e8fab31aded6f8e78ed73e3414daa15fd38dd79153d47c79aa8392cbd47

Malware Config

Targets

    • Target

      b0077e5f7d260be16e406d3e5993641c.exe

    • Size

      387KB

    • MD5

      b0077e5f7d260be16e406d3e5993641c

    • SHA1

      e0de42539db1aee89f4e863151a9cd27ebd00655

    • SHA256

      b2e0a2a4ee3ca452cd290a72cd11f0fe2e178ca8566badd578377fa211aa59a8

    • SHA512

      0a3dad4907830e110b0b65ec6457365eac5cad56302b801c02f44ed5b509d0f0ccf52e8fab31aded6f8e78ed73e3414daa15fd38dd79153d47c79aa8392cbd47

    • Taurus Stealer

      Taurus is an infostealer first seen in June 2020.

    • Taurus Stealer Payload

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses 2FA software files, possible credential harvesting

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks