Overview

overview

10

Static

static

7f3c69c97f...e7.exe

windows7-x64

10

7f3c69c97f...e7.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7f3c69c97fcc1374540adaf6eba5ad6159faa11d57a64d92784f84e4a2bf6de7

  • Size

    925KB

  • Sample

    230129-y6qh5sde31

  • MD5

    3589b2a4fe7f455f43e03c76fafc9c98

  • SHA1

    a814ea0a7230ee5fb40a5aa18d3f16093f73b55f

  • SHA256

    7f3c69c97fcc1374540adaf6eba5ad6159faa11d57a64d92784f84e4a2bf6de7

  • SHA512

    1f92efe9c905d30e9859ac26212c79db2f65081efbc1070e9928bcca0df99b1779a1628633cc727843099aff69d10cd2b5c576c9e2f6f9c42a11ac1c0cddd1b8

  • SSDEEP

    12288:W+DhHLSmf6G/xy67pr7qvGVMkfzSXEvxPcLJPpQf5:DrXf9YwpUkfzSUvxPcVxC5

Score
10/10
taurusspywarestealertrojan

Malware Config

Targets

    • Target

      7f3c69c97fcc1374540adaf6eba5ad6159faa11d57a64d92784f84e4a2bf6de7

    • Size

      925KB

    • MD5

      3589b2a4fe7f455f43e03c76fafc9c98

    • SHA1

      a814ea0a7230ee5fb40a5aa18d3f16093f73b55f

    • SHA256

      7f3c69c97fcc1374540adaf6eba5ad6159faa11d57a64d92784f84e4a2bf6de7

    • SHA512

      1f92efe9c905d30e9859ac26212c79db2f65081efbc1070e9928bcca0df99b1779a1628633cc727843099aff69d10cd2b5c576c9e2f6f9c42a11ac1c0cddd1b8

    • SSDEEP

      12288:W+DhHLSmf6G/xy67pr7qvGVMkfzSXEvxPcLJPpQf5:DrXf9YwpUkfzSUvxPcVxC5

    Score
    10/10
    taurusspywarestealertrojan

    • Taurus Stealer

      Taurus is an infostealer first seen in June 2020.

      trojanstealertaurus

    • Taurus Stealer payload

    • Accesses 2FA software files, possible credential harvesting

      spywarestealer

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

1
T1081

Discovery

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Tasks