Overview

overview

10

Static

static

d1d13d5e09...50.exe

windows7_x64

10

d1d13d5e09...50.exe

windows10-2004_x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d1d13d5e097991e4aa47d7ca7f27e8ab86d868a2d07c89794e34fed6b9155650

  • Size

    516KB

  • Sample

    220508-gr96kagha4

  • MD5

    0021da726a32f0d55f2a81958da26ad4

  • SHA1

    28acebd920aecd34689f18b261b407237886ba03

  • SHA256

    d1d13d5e097991e4aa47d7ca7f27e8ab86d868a2d07c89794e34fed6b9155650

  • SHA512

    fa6a07c2b093d71a16aea4ffdc4caeca79bb64bd7136f814b682d57152859f4b8004693e3755b58e080d4d2ae3326555f67d03e5803964f5e07e0093c79d15fd

Score
10/10
taurusspywarestealertrojan

Malware Config

Targets

    • Target

      d1d13d5e097991e4aa47d7ca7f27e8ab86d868a2d07c89794e34fed6b9155650

    • Size

      516KB

    • MD5

      0021da726a32f0d55f2a81958da26ad4

    • SHA1

      28acebd920aecd34689f18b261b407237886ba03

    • SHA256

      d1d13d5e097991e4aa47d7ca7f27e8ab86d868a2d07c89794e34fed6b9155650

    • SHA512

      fa6a07c2b093d71a16aea4ffdc4caeca79bb64bd7136f814b682d57152859f4b8004693e3755b58e080d4d2ae3326555f67d03e5803964f5e07e0093c79d15fd

    Score
    10/10
    taurusspywarestealertrojan

    • Taurus Stealer

      Taurus is an infostealer first seen in June 2020.

      trojanstealertaurus

    • Taurus Stealer Payload

    • Accesses 2FA software files, possible credential harvesting

      spywarestealer

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

1
T1081

Discovery

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Tasks