Overview

overview

10

Static

static

3

dc834af94d...9f.exe

windows7-x64

10

dc834af94d...9f.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dc834af94d4cba3391bcd4b6537b8b9f

  • Size

    939KB

  • Sample

    231228-nv4xaacdd3

  • MD5

    dc834af94d4cba3391bcd4b6537b8b9f

  • SHA1

    7b238266576ba6d7340f340f168d3695018e9658

  • SHA256

    70a99ba0d7f5480712d328df4fbee1b292785672ca182eb470cc24ee2aefa2e2

  • SHA512

    103eb5eaf0af283ccd0e8167dc7468386f3ec032d7420b6a63630ce0259b1282ddf2408a0aa744af7e39d3e05e050b47a8514c5504e0485dab3e431943b6ee27

  • SSDEEP

    6144:D1f6vg7Sq49hmWdQ++WD+z91pC+MmA506FF1ZYN7EEpLdJF+UYELYGcJg65H0d9O:D1fzSzkq0z91p1MmAjPANbrMUF8Gxf

Score
10/10
taurusdiscoveryspywarestealertrojan

Malware Config

Targets

    • Target

      dc834af94d4cba3391bcd4b6537b8b9f

    • Size

      939KB

    • MD5

      dc834af94d4cba3391bcd4b6537b8b9f

    • SHA1

      7b238266576ba6d7340f340f168d3695018e9658

    • SHA256

      70a99ba0d7f5480712d328df4fbee1b292785672ca182eb470cc24ee2aefa2e2

    • SHA512

      103eb5eaf0af283ccd0e8167dc7468386f3ec032d7420b6a63630ce0259b1282ddf2408a0aa744af7e39d3e05e050b47a8514c5504e0485dab3e431943b6ee27

    • SSDEEP

      6144:D1f6vg7Sq49hmWdQ++WD+z91pC+MmA506FF1ZYN7EEpLdJF+UYELYGcJg65H0d9O:D1fzSzkq0z91p1MmAjPANbrMUF8Gxf

    Score
    10/10
    taurusdiscoveryspywarestealertrojan

    • Taurus Stealer

      Taurus is an infostealer first seen in June 2020.

      trojanstealertaurus

    • Taurus Stealer payload

    • Deletes itself

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Accesses 2FA software files, possible credential harvesting

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

2
T1552

Credentials In Files

2
T1552.001

Discovery

Query Registry

1
T1012

Lateral Movement

Collection

Data from Local System

2
T1005

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks