Overview

overview

10

Static

static

4734f6cd79...38.exe

windows7-x64

10

4734f6cd79...38.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4734f6cd792df420b26a864fd71085393511fb4c6b0dd2017ebb3fd3897ec638

  • Size

    582KB

  • Sample

    230129-v5dw6sff46

  • MD5

    28a732a1d13cae5e3a500bd4c5f9c8e8

  • SHA1

    4ea2adab7eaedffc9e9ccc5ef49185fa55588652

  • SHA256

    4734f6cd792df420b26a864fd71085393511fb4c6b0dd2017ebb3fd3897ec638

  • SHA512

    8559eda66ccdab68676217e8467f554a0704ce62bd258c3acee9683de96d21fcd181a2ecbbaac5e26d224c908b6f9ce92bbdcb1e495e332c86a890f7e86a40ce

  • SSDEEP

    6144:F/cVnKFOhm+1B+lWEOZAoFPz0OhRtLbTqY3SaJg0Hfr5FbuZ6ViHJO:F8kqXZAoFQYRtn2YiaJt/r5FbnVeO

Score
10/10
taurusdiscoveryspywarestealertrojan

Malware Config

Targets

    • Target

      4734f6cd792df420b26a864fd71085393511fb4c6b0dd2017ebb3fd3897ec638

    • Size

      582KB

    • MD5

      28a732a1d13cae5e3a500bd4c5f9c8e8

    • SHA1

      4ea2adab7eaedffc9e9ccc5ef49185fa55588652

    • SHA256

      4734f6cd792df420b26a864fd71085393511fb4c6b0dd2017ebb3fd3897ec638

    • SHA512

      8559eda66ccdab68676217e8467f554a0704ce62bd258c3acee9683de96d21fcd181a2ecbbaac5e26d224c908b6f9ce92bbdcb1e495e332c86a890f7e86a40ce

    • SSDEEP

      6144:F/cVnKFOhm+1B+lWEOZAoFPz0OhRtLbTqY3SaJg0Hfr5FbuZ6ViHJO:F8kqXZAoFQYRtn2YiaJt/r5FbnVeO

    Score
    10/10
    taurusdiscoveryspywarestealertrojan

    • Taurus Stealer

      Taurus is an infostealer first seen in June 2020.

      trojanstealertaurus

    • Taurus Stealer payload

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Accesses 2FA software files, possible credential harvesting

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

2
T1081

Discovery

Query Registry

1
T1012

Lateral Movement

Collection

Data from Local System

2
T1005

Exfiltration

Command and Control

Impact

Tasks