Analysis
-
max time kernel
193s -
max time network
244s -
platform
windows7_x64 -
resource
win7-20221111-en -
resource tags
arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system -
submitted
29-01-2023 17:51
Static task
static1
Behavioral task
behavioral1
Sample
f1b337281200ef7181c9bdd499f538d44196e58387892ffc484f597bd7f19c70.exe
Resource
win7-20221111-en
General
-
Target
f1b337281200ef7181c9bdd499f538d44196e58387892ffc484f597bd7f19c70.exe
-
Size
356KB
-
MD5
659ac487fea10ee4e64bf1f7db37e038
-
SHA1
4399fcd73664e9bcb635a74490f0c477049f715a
-
SHA256
f1b337281200ef7181c9bdd499f538d44196e58387892ffc484f597bd7f19c70
-
SHA512
2d2a579a291380ffe7167bcb843a47ff9ec4406c9955a31c561b5781935b5f712240911c616c7b0f365968bc75ef5e0e69b4ab350f1711e1d5a54ade613777f3
-
SSDEEP
6144:rSf3+E2BEacMw+1xoOvwQ38WRLEhPzoPCEszXZiiyJ/NdqWpcJ28j:rSvv22acMF7vwARLcECEszJiiwh
Malware Config
Signatures
-
Taurus Stealer payload 2 IoCs
Processes:
resource yara_rule behavioral1/memory/956-57-0x0000000000260000-0x0000000000298000-memory.dmp family_taurus_stealer behavioral1/memory/956-58-0x0000000000400000-0x0000000000853000-memory.dmp family_taurus_stealer -
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
Processes
Network
MITRE ATT&CK Matrix ATT&CK v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/956-54-0x0000000000CB8000-0x0000000000CDC000-memory.dmpFilesize
144KB
-
memory/956-55-0x0000000075151000-0x0000000075153000-memory.dmpFilesize
8KB
-
memory/956-56-0x0000000000CB8000-0x0000000000CDC000-memory.dmpFilesize
144KB
-
memory/956-57-0x0000000000260000-0x0000000000298000-memory.dmpFilesize
224KB
-
memory/956-58-0x0000000000400000-0x0000000000853000-memory.dmpFilesize
4.3MB
-
memory/956-59-0x0000000000CB8000-0x0000000000CDC000-memory.dmpFilesize
144KB