taurus | 8e5b6eb034d3b637b88680809e6908b782e4bcf43eab821fa37b1953a0b884b1 | Triage

Submit
Reports

Overview

overview

Static

static

8e5b6eb034...b1.exe

windows7-x64

8e5b6eb034...b1.exe

windows10-2004-x64

Sharing

General

Target

8e5b6eb034d3b637b88680809e6908b782e4bcf43eab821fa37b1953a0b884b1
Size

209KB
Sample

221130-w8w3lagh9z
MD5

b18db9c158f2610a9191736203fe86fd
SHA1

23d6158327c361b7c60735b5820e718eef6a3064
SHA256

8e5b6eb034d3b637b88680809e6908b782e4bcf43eab821fa37b1953a0b884b1
SHA512

f4cb54c08de2d575196a806b4ce23b33280237fb06c7f07e56b3bb031c231370152a488cd168d71998ca054ad22689078a839cf3936142056b28003caf1b0392
SSDEEP

3072:u5bhq9KaK0pIwfz/lUYJ8lHjGpew/2p9YEcVYaOayrjfCgVzS0qRlW:u+9tK0ptfz6+q6p/S5qYaODjfCmSVW

Score

10^/10

taurus discovery spyware stealer trojan

Static task

static1

Behavioral task

behavioral1

Sample

8e5b6eb034d3b637b88680809e6908b782e4bcf43eab821fa37b1953a0b884b1.exe

Resource

win7-20220812-en

taurus discovery spyware stealer trojan

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral2

Sample

8e5b6eb034d3b637b88680809e6908b782e4bcf43eab821fa37b1953a0b884b1.exe

Resource

win10v2004-20221111-en

taurus discovery spyware stealer trojan

windows10-2004-x64

5 signatures

150 seconds

Malware Config

Targets

- Target
  
  8e5b6eb034d3b637b88680809e6908b782e4bcf43eab821fa37b1953a0b884b1
- Size
  
  209KB
- MD5
  
  b18db9c158f2610a9191736203fe86fd
- SHA1
  
  23d6158327c361b7c60735b5820e718eef6a3064
- SHA256
  
  8e5b6eb034d3b637b88680809e6908b782e4bcf43eab821fa37b1953a0b884b1
- SHA512
  
  f4cb54c08de2d575196a806b4ce23b33280237fb06c7f07e56b3bb031c231370152a488cd168d71998ca054ad22689078a839cf3936142056b28003caf1b0392
- SSDEEP
  
  3072:u5bhq9KaK0pIwfz/lUYJ8lHjGpew/2p9YEcVYaOayrjfCgVzS0qRlW:u+9tK0ptfz6+q6p/S5qYaODjfCmSVW
Score

10^/10

taurus discovery spyware stealer trojan
- Taurus Stealer
  Taurus is an infostealer first seen in June 2020.
  trojan stealer taurus
- Taurus Stealer payload
- Deletes itself
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Accesses 2FA software files, possible credential harvesting
  spyware stealer
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Query Registry

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

taurusdiscoveryspywarestealertrojan

behavioral2

taurusdiscoveryspywarestealertrojan

© 2018-2024

Terms | Privacy