General

  • Target

    b06710a8a144117fb1c723965cbd031da4a36bedb17271ce508e73f91034cc39

  • Size

    257KB

  • Sample

    220329-zs186afdan

  • MD5

    3d2727fffd7f4b608dde1cab04157d89

  • SHA1

    737007bfd120ad8922533052b178f51817d783c3

  • SHA256

    b06710a8a144117fb1c723965cbd031da4a36bedb17271ce508e73f91034cc39

  • SHA512

    f7d227c1eca36d6f7800df04ac0ae60583da055e324cd3ad6ad85edff0d88c282a9491146b8a4160bbc76088d66955f660115cea5aca668a528c51e4916031d2

Malware Config

Targets

    • Target

      b06710a8a144117fb1c723965cbd031da4a36bedb17271ce508e73f91034cc39

    • Size

      257KB

    • MD5

      3d2727fffd7f4b608dde1cab04157d89

    • SHA1

      737007bfd120ad8922533052b178f51817d783c3

    • SHA256

      b06710a8a144117fb1c723965cbd031da4a36bedb17271ce508e73f91034cc39

    • SHA512

      f7d227c1eca36d6f7800df04ac0ae60583da055e324cd3ad6ad85edff0d88c282a9491146b8a4160bbc76088d66955f660115cea5aca668a528c51e4916031d2

    • Taurus Stealer

      Taurus is an infostealer first seen in June 2020.

    • Taurus Stealer Payload

    • Deletes itself

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses 2FA software files, possible credential harvesting

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks