Overview

overview

10

Static

static

42d5c8c21c...20.exe

windows7-x64

10

42d5c8c21c...20.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    42d5c8c21c595230a1b3f5555cda9acfdd04ff0c8819468ebb5a7d5763887d20

  • Size

    869KB

  • Sample

    230129-ybgmrace41

  • MD5

    727be7b61ca42c59142a37ea2a05bfb2

  • SHA1

    efdbcb00185dd49538473dd3ceae33b9bd6d618a

  • SHA256

    42d5c8c21c595230a1b3f5555cda9acfdd04ff0c8819468ebb5a7d5763887d20

  • SHA512

    a45a73892522bf3050f072baf973ec55da4b7b7ed2ac3b1832e54a96caf107c7410d6d006a5528034981adf3922e8273c60af2ed3e441891d8263dbdae52c0cb

  • SSDEEP

    12288:DNbrMUF8Gxf2l9iGv+nhoVMYB82OncXmONbrMUF8Gxf:xhmCgiGv+nhW82OnUhmC

Score
10/10
taurusspywarestealertrojan

Malware Config

Targets

    • Target

      42d5c8c21c595230a1b3f5555cda9acfdd04ff0c8819468ebb5a7d5763887d20

    • Size

      869KB

    • MD5

      727be7b61ca42c59142a37ea2a05bfb2

    • SHA1

      efdbcb00185dd49538473dd3ceae33b9bd6d618a

    • SHA256

      42d5c8c21c595230a1b3f5555cda9acfdd04ff0c8819468ebb5a7d5763887d20

    • SHA512

      a45a73892522bf3050f072baf973ec55da4b7b7ed2ac3b1832e54a96caf107c7410d6d006a5528034981adf3922e8273c60af2ed3e441891d8263dbdae52c0cb

    • SSDEEP

      12288:DNbrMUF8Gxf2l9iGv+nhoVMYB82OncXmONbrMUF8Gxf:xhmCgiGv+nhW82OnUhmC

    Score
    10/10
    taurusspywarestealertrojan

    • Taurus Stealer

      Taurus is an infostealer first seen in June 2020.

      trojanstealertaurus

    • Taurus Stealer payload

    • Accesses 2FA software files, possible credential harvesting

      spywarestealer

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

1
T1081

Discovery

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Tasks