Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
3 IOCs
The GlorySprout or a Failed Clone of Taurus Stealer
Threat Actors
Malware Families
Excerpt
Case Study The GlorySprout ads surfaced on the XSS forum at the beginning of March 2024 (the name makes me think of beansprout; perhaps the seller behind the stealer is a vegetarian). The stealer, developed in C++, is available for purchase at $300, offering lifetime access and 20 days of crypting service, which encrypts the stealer’s payload to evade detection. Similar to other stealers, it includes a pre-built loader, Anti-CIS execution, and a Grabber module (which is…
Read the original report →Diamond Model
Adversary(2)
Infrastructure
Capability(2)
Victim
Indicators of Compromise
Open the mindmap →3 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| MD5 | 3952a294b831e8738f70c2caea5e0559 | Medium | Score 53/100 | First seen |
| SHA256 | 8996c252fc41b7ec0ec73ce814e84136be6efef898822146c25af2330f4fd04a | Medium | Score 53/100 | First seen |
| MD5 | d295c4f639d581851aea8fbcc1ea0989 | Medium | Score 53/100 | First seen |
IOC Relationship Graph
Building graph…