Overview

overview

10

Static

static

10

2891b08c13...e4.exe

windows7_x64

10

2891b08c13...e4.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2891b08c134238beeb08582e3465d77c0fff2ac4bf2cd67162b7402b7246ace4

  • Size

    1.7MB

  • Sample

    220615-vpv6hsghcj

  • MD5

    ad389201c02e4edbeff9b26be6b0ea58

  • SHA1

    08b174b3890840b275aec4b6942772c61e07f4e4

  • SHA256

    2891b08c134238beeb08582e3465d77c0fff2ac4bf2cd67162b7402b7246ace4

  • SHA512

    b30a496bed466136c662f9b69b9504161203458d9fc5e5afbce6175a446402526705eb9c82637e6d4bcd264b26978704829786cb8ea5e6030fc6dedef611cd82

Score
10/10
legiondownloadersuricata

Malware Config

Targets

    • Target

      2891b08c134238beeb08582e3465d77c0fff2ac4bf2cd67162b7402b7246ace4

    • Size

      1.7MB

    • MD5

      ad389201c02e4edbeff9b26be6b0ea58

    • SHA1

      08b174b3890840b275aec4b6942772c61e07f4e4

    • SHA256

      2891b08c134238beeb08582e3465d77c0fff2ac4bf2cd67162b7402b7246ace4

    • SHA512

      b30a496bed466136c662f9b69b9504161203458d9fc5e5afbce6175a446402526705eb9c82637e6d4bcd264b26978704829786cb8ea5e6030fc6dedef611cd82

    Score
    10/10
    suricata

    • suricata: ET MALWARE Legion Loader Activity Observed (suspira)

      suricata: ET MALWARE Legion Loader Activity Observed (suspira)

      suricata

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks