Overview

overview

10

Static

static

777e7861b4...07.exe

windows7_x64

10

777e7861b4...07.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    777e7861b422ef1f95ab21140b165507.exe

  • Size

    344KB

  • Sample

    210418-jqm3kxpah6

  • MD5

    777e7861b422ef1f95ab21140b165507

  • SHA1

    3d8352d71ea8b7d815f49793534f2c0c4976f324

  • SHA256

    2713778531071a2f5e9d1166b2e55ed95afeaaa7b839bd504c7453448f583cee

  • SHA512

    a80e5c4a8797b730416d2e651891aa1e5f6b5f3c4b0561eacdd3da178ece2d5d2ddd58b2a41c918a82fb65b7bef7a9ddc3c090c572e2466ca153552a89a3fa5b

Score
10/10
taurusdiscoveryspywarestealertrojan

Malware Config

Targets

    • Target

      777e7861b422ef1f95ab21140b165507.exe

    • Size

      344KB

    • MD5

      777e7861b422ef1f95ab21140b165507

    • SHA1

      3d8352d71ea8b7d815f49793534f2c0c4976f324

    • SHA256

      2713778531071a2f5e9d1166b2e55ed95afeaaa7b839bd504c7453448f583cee

    • SHA512

      a80e5c4a8797b730416d2e651891aa1e5f6b5f3c4b0561eacdd3da178ece2d5d2ddd58b2a41c918a82fb65b7bef7a9ddc3c090c572e2466ca153552a89a3fa5b

    Score
    10/10
    taurusdiscoveryspywarestealertrojan

    • Taurus Stealer

      Taurus is an infostealer first seen in June 2020.

      trojanstealertaurus

    • Taurus Stealer Payload

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Accesses 2FA software files, possible credential harvesting

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

2
T1081

Discovery

Query Registry

1
T1012

Lateral Movement

Collection

Data from Local System

2
T1005

Exfiltration

Command and Control

Impact

Tasks