taurus | f1b337281200ef7181c9bdd499f538d44196e58387892ffc484f597bd7f19c70 | Triage

Submit
Reports

Overview

overview

Static

static

f1b3372812...70.exe

windows7-x64

f1b3372812...70.exe

windows10-2004-x64

Sharing

General

Target

f1b337281200ef7181c9bdd499f538d44196e58387892ffc484f597bd7f19c70
Size

356KB
Sample

230129-wfjlssga59
MD5

659ac487fea10ee4e64bf1f7db37e038
SHA1

4399fcd73664e9bcb635a74490f0c477049f715a
SHA256

f1b337281200ef7181c9bdd499f538d44196e58387892ffc484f597bd7f19c70
SHA512

2d2a579a291380ffe7167bcb843a47ff9ec4406c9955a31c561b5781935b5f712240911c616c7b0f365968bc75ef5e0e69b4ab350f1711e1d5a54ade613777f3
SSDEEP

6144:rSf3+E2BEacMw+1xoOvwQ38WRLEhPzoPCEszXZiiyJ/NdqWpcJ28j:rSvv22acMF7vwARLcECEszJiiwh

Score

10^/10

taurus discovery spyware stealer trojan

Static task

static1

Behavioral task

behavioral1

Sample

f1b337281200ef7181c9bdd499f538d44196e58387892ffc484f597bd7f19c70.exe

Resource

win7-20221111-en

taurus discovery spyware stealer trojan

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral2

Sample

f1b337281200ef7181c9bdd499f538d44196e58387892ffc484f597bd7f19c70.exe

Resource

win10v2004-20220812-en

taurus discovery spyware stealer trojan

windows10-2004-x64

5 signatures

150 seconds

Malware Config

Targets

- Target
  
  f1b337281200ef7181c9bdd499f538d44196e58387892ffc484f597bd7f19c70
- Size
  
  356KB
- MD5
  
  659ac487fea10ee4e64bf1f7db37e038
- SHA1
  
  4399fcd73664e9bcb635a74490f0c477049f715a
- SHA256
  
  f1b337281200ef7181c9bdd499f538d44196e58387892ffc484f597bd7f19c70
- SHA512
  
  2d2a579a291380ffe7167bcb843a47ff9ec4406c9955a31c561b5781935b5f712240911c616c7b0f365968bc75ef5e0e69b4ab350f1711e1d5a54ade613777f3
- SSDEEP
  
  6144:rSf3+E2BEacMw+1xoOvwQ38WRLEhPzoPCEszXZiiyJ/NdqWpcJ28j:rSvv22acMF7vwARLcECEszJiiwh
Score

10^/10

taurus discovery spyware stealer trojan
- Taurus Stealer
  Taurus is an infostealer first seen in June 2020.
  trojan stealer taurus
- Taurus Stealer payload
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Accesses 2FA software files, possible credential harvesting
  spyware stealer
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Query Registry

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

taurusdiscoveryspywarestealertrojan

behavioral2

taurusdiscoveryspywarestealertrojan

© 2018-2024

Terms | Privacy