General

  • Target

    7f3c69c97fcc1374540adaf6eba5ad6159faa11d57a64d92784f84e4a2bf6de7

  • Size

    925KB

  • Sample

    230129-y6qh5sde31

  • MD5

    3589b2a4fe7f455f43e03c76fafc9c98

  • SHA1

    a814ea0a7230ee5fb40a5aa18d3f16093f73b55f

  • SHA256

    7f3c69c97fcc1374540adaf6eba5ad6159faa11d57a64d92784f84e4a2bf6de7

  • SHA512

    1f92efe9c905d30e9859ac26212c79db2f65081efbc1070e9928bcca0df99b1779a1628633cc727843099aff69d10cd2b5c576c9e2f6f9c42a11ac1c0cddd1b8

  • SSDEEP

    12288:W+DhHLSmf6G/xy67pr7qvGVMkfzSXEvxPcLJPpQf5:DrXf9YwpUkfzSUvxPcVxC5

Malware Config

Targets

    • Target

      7f3c69c97fcc1374540adaf6eba5ad6159faa11d57a64d92784f84e4a2bf6de7

    • Size

      925KB

    • MD5

      3589b2a4fe7f455f43e03c76fafc9c98

    • SHA1

      a814ea0a7230ee5fb40a5aa18d3f16093f73b55f

    • SHA256

      7f3c69c97fcc1374540adaf6eba5ad6159faa11d57a64d92784f84e4a2bf6de7

    • SHA512

      1f92efe9c905d30e9859ac26212c79db2f65081efbc1070e9928bcca0df99b1779a1628633cc727843099aff69d10cd2b5c576c9e2f6f9c42a11ac1c0cddd1b8

    • SSDEEP

      12288:W+DhHLSmf6G/xy67pr7qvGVMkfzSXEvxPcLJPpQf5:DrXf9YwpUkfzSUvxPcVxC5

    • Taurus Stealer

      Taurus is an infostealer first seen in June 2020.

    • Taurus Stealer payload

    • Accesses 2FA software files, possible credential harvesting

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks