taurus | 4734f6cd792df420b26a864fd71085393511fb4c6b0dd2017ebb3fd3897ec638 | Triage

Submit
Reports

Overview

overview

Static

static

4734f6cd79...38.exe

windows7-x64

4734f6cd79...38.exe

windows10-2004-x64

Sharing

General

Target

4734f6cd792df420b26a864fd71085393511fb4c6b0dd2017ebb3fd3897ec638
Size

582KB
Sample

230129-v5dw6sff46
MD5

28a732a1d13cae5e3a500bd4c5f9c8e8
SHA1

4ea2adab7eaedffc9e9ccc5ef49185fa55588652
SHA256

4734f6cd792df420b26a864fd71085393511fb4c6b0dd2017ebb3fd3897ec638
SHA512

8559eda66ccdab68676217e8467f554a0704ce62bd258c3acee9683de96d21fcd181a2ecbbaac5e26d224c908b6f9ce92bbdcb1e495e332c86a890f7e86a40ce
SSDEEP

6144:F/cVnKFOhm+1B+lWEOZAoFPz0OhRtLbTqY3SaJg0Hfr5FbuZ6ViHJO:F8kqXZAoFQYRtn2YiaJt/r5FbnVeO

Score

10^/10

taurus discovery spyware stealer trojan

Static task

static1

Behavioral task

behavioral1

Sample

4734f6cd792df420b26a864fd71085393511fb4c6b0dd2017ebb3fd3897ec638.exe

Resource

win7-20221111-en

taurus discovery spyware stealer trojan

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral2

Sample

4734f6cd792df420b26a864fd71085393511fb4c6b0dd2017ebb3fd3897ec638.exe

Resource

win10v2004-20220812-en

taurus discovery spyware stealer trojan

windows10-2004-x64

5 signatures

150 seconds

Malware Config

Targets

- Target
  
  4734f6cd792df420b26a864fd71085393511fb4c6b0dd2017ebb3fd3897ec638
- Size
  
  582KB
- MD5
  
  28a732a1d13cae5e3a500bd4c5f9c8e8
- SHA1
  
  4ea2adab7eaedffc9e9ccc5ef49185fa55588652
- SHA256
  
  4734f6cd792df420b26a864fd71085393511fb4c6b0dd2017ebb3fd3897ec638
- SHA512
  
  8559eda66ccdab68676217e8467f554a0704ce62bd258c3acee9683de96d21fcd181a2ecbbaac5e26d224c908b6f9ce92bbdcb1e495e332c86a890f7e86a40ce
- SSDEEP
  
  6144:F/cVnKFOhm+1B+lWEOZAoFPz0OhRtLbTqY3SaJg0Hfr5FbuZ6ViHJO:F8kqXZAoFQYRtn2YiaJt/r5FbnVeO
Score

10^/10

taurus discovery spyware stealer trojan
- Taurus Stealer
  Taurus is an infostealer first seen in June 2020.
  trojan stealer taurus
- Taurus Stealer payload
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Accesses 2FA software files, possible credential harvesting
  spyware stealer
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Query Registry

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

taurusdiscoveryspywarestealertrojan

behavioral2

taurusdiscoveryspywarestealertrojan

© 2018-2024

Terms | Privacy