legionlocker | LegionLocker3[.]0[.]exe | Triage

Sharing

General

Target

LegionLocker3.0.exe
Size

3.0MB
MD5

cdccf5b587aac1a4aeb53f8aaa465759
SHA1

3d804d15282a5b031684cc6bd8b9b7d9d880d13d
SHA256

f6289c13d79d8de611e9c143602298970b5969c15a4d6a3e40efec794bc371dd
SHA512

61668842acbb52c8c1e35e5ba4cca412ea1a56b4de6e3adb58f158cee77f8e04e24be99bbbc92c5f551afc2bbe45cf9c99c7b0b63affb8cef3d6718dc0c950f3

Score

10^/10

themida ransomware legionlocker

Malware Config

Signatures

Detected LegionLocker ransomware 1 IoCs
Sample contains strings associated with the LegionLocker family.
ransomware

Processes:

resource yara_rule

sample family_legionlocker
Legionlocker family
legionlocker
Themida packer 1 IoCs
Detects Themida, an advanced Windows software protection system.
themida

Processes:

resource yara_rule

sample themida

Files

LegionLocker3.0.exe
.exe windows x86