General

  • Target

    502572d06c7db1bcaf2b9421ca873055182fb36a51ed5c9b725c6d3e12a66837

  • Size

    457KB

  • Sample

    220305-xbnwdsghh4

  • MD5

    258761933114aff3793796ea1a08ff72

  • SHA1

    7b46a0ef06ebece1b2da53f2a68013bfc9e9e39a

  • SHA256

    502572d06c7db1bcaf2b9421ca873055182fb36a51ed5c9b725c6d3e12a66837

  • SHA512

    08d7507a570568fdfb1fa3f5cef14048a7b195753b7c76928f3150c3ea74e0c0596da655e59f7bfb2cb169efbc16166bee403b20b8b2ce934c7d7a4a923d2a5d

Malware Config

Targets

    • Target

      502572d06c7db1bcaf2b9421ca873055182fb36a51ed5c9b725c6d3e12a66837

    • Size

      457KB

    • MD5

      258761933114aff3793796ea1a08ff72

    • SHA1

      7b46a0ef06ebece1b2da53f2a68013bfc9e9e39a

    • SHA256

      502572d06c7db1bcaf2b9421ca873055182fb36a51ed5c9b725c6d3e12a66837

    • SHA512

      08d7507a570568fdfb1fa3f5cef14048a7b195753b7c76928f3150c3ea74e0c0596da655e59f7bfb2cb169efbc16166bee403b20b8b2ce934c7d7a4a923d2a5d

    • Taurus Stealer

      Taurus is an infostealer first seen in June 2020.

    • Taurus Stealer Payload

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses 2FA software files, possible credential harvesting

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks