taurus | 70a99ba0d7f5480712d328df4fbee1b292785672ca182eb470cc24ee2aefa2e2

General

Target

dc834af94d4cba3391bcd4b6537b8b9f
Size

939KB
Sample

231228-nv4xaacdd3
MD5

dc834af94d4cba3391bcd4b6537b8b9f
SHA1

7b238266576ba6d7340f340f168d3695018e9658
SHA256

70a99ba0d7f5480712d328df4fbee1b292785672ca182eb470cc24ee2aefa2e2
SHA512

103eb5eaf0af283ccd0e8167dc7468386f3ec032d7420b6a63630ce0259b1282ddf2408a0aa744af7e39d3e05e050b47a8514c5504e0485dab3e431943b6ee27
SSDEEP

6144:D1f6vg7Sq49hmWdQ++WD+z91pC+MmA506FF1ZYN7EEpLdJF+UYELYGcJg65H0d9O:D1fzSzkq0z91p1MmAjPANbrMUF8Gxf

Score

10^/10

Malware Config

Targets

- Target
  
  dc834af94d4cba3391bcd4b6537b8b9f
- Size
  
  939KB
- MD5
  
  dc834af94d4cba3391bcd4b6537b8b9f
- SHA1
  
  7b238266576ba6d7340f340f168d3695018e9658
- SHA256
  
  70a99ba0d7f5480712d328df4fbee1b292785672ca182eb470cc24ee2aefa2e2
- SHA512
  
  103eb5eaf0af283ccd0e8167dc7468386f3ec032d7420b6a63630ce0259b1282ddf2408a0aa744af7e39d3e05e050b47a8514c5504e0485dab3e431943b6ee27
- SSDEEP
  
  6144:D1f6vg7Sq49hmWdQ++WD+z91pC+MmA506FF1ZYN7EEpLdJF+UYELYGcJg65H0d9O:D1fzSzkq0z91p1MmAjPANbrMUF8Gxf
Score

10^/10

taurus discovery spyware stealer trojan
- Taurus Stealer
  Taurus is an infostealer first seen in June 2020.
  trojan stealer taurus
- Taurus Stealer payload
- Deletes itself
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Accesses 2FA software files, possible credential harvesting
  spyware stealer
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

2

T1552

Credentials In Files

2

T1552.001

Discovery

Query Registry

1

T1012

Lateral Movement

Collection

Data from Local System

2

T1005

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Taurus Stealer

Taurus Stealer payload

Deletes itself

Reads user/profile data of web browsers

Accesses 2FA software files, possible credential harvesting

Checks installed software on the system

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2