taurus | 8d721ae4f0e9bc45b9ed943d41d59ffc522fa7ffe624a562791997924c7f51fd | Triage

Submit
Reports

Overview

overview

Static

static

8d721ae4f0...fd.exe

windows7-x64

8d721ae4f0...fd.exe

windows10-2004-x64

Sharing

General

Target

8d721ae4f0e9bc45b9ed943d41d59ffc522fa7ffe624a562791997924c7f51fd
Size

774KB
Sample

221130-vkchlscb7t
MD5

ea3f34c247aab89606489d062b246697
SHA1

48c2b2f2f8cf518793533a7b588657ccf4302df7
SHA256

8d721ae4f0e9bc45b9ed943d41d59ffc522fa7ffe624a562791997924c7f51fd
SHA512

34558da96f3bcf6d0b29903403ffd611362fc7bebf29b4471ba8b693318a8c3c1e4650a738e3bf00879d4674b0b889d8bd4a03e86fc0771710bf304de3098c20
SSDEEP

12288:z3a+H1dtXSOngM/CF39utpqZ3qdUiPPBDoAj3kob:zq+xigD/CF39uvqNqdjPPCARb

Score

10^/10

taurus spyware stealer trojan

Static task

static1

Behavioral task

behavioral1

Sample

8d721ae4f0e9bc45b9ed943d41d59ffc522fa7ffe624a562791997924c7f51fd.exe

Resource

win7-20221111-en

taurus spyware stealer trojan

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral2

Sample

8d721ae4f0e9bc45b9ed943d41d59ffc522fa7ffe624a562791997924c7f51fd.exe

Resource

win10v2004-20221111-en

taurus spyware stealer trojan

windows10-2004-x64

7 signatures

150 seconds

Malware Config

Targets

- Target
  
  8d721ae4f0e9bc45b9ed943d41d59ffc522fa7ffe624a562791997924c7f51fd
- Size
  
  774KB
- MD5
  
  ea3f34c247aab89606489d062b246697
- SHA1
  
  48c2b2f2f8cf518793533a7b588657ccf4302df7
- SHA256
  
  8d721ae4f0e9bc45b9ed943d41d59ffc522fa7ffe624a562791997924c7f51fd
- SHA512
  
  34558da96f3bcf6d0b29903403ffd611362fc7bebf29b4471ba8b693318a8c3c1e4650a738e3bf00879d4674b0b889d8bd4a03e86fc0771710bf304de3098c20
- SSDEEP
  
  12288:z3a+H1dtXSOngM/CF39utpqZ3qdUiPPBDoAj3kob:zq+xigD/CF39uvqNqdjPPCARb
Score

10^/10

taurus spyware stealer trojan
- Taurus Stealer
  Taurus is an infostealer first seen in June 2020.
  trojan stealer taurus
- Taurus Stealer payload
- Accesses 2FA software files, possible credential harvesting
  spyware stealer
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

taurusspywarestealertrojan

behavioral2

taurusspywarestealertrojan

© 2018-2024

Terms | Privacy