legion | 2891b08c134238beeb08582e3465d77c0fff2ac4bf2cd67162b7402b7246ace4 | Triage

Sharing

General

Target

ad389201c02e4edbeff9b26be6b0ea58_JaffaCakes118
Size

1.7MB
Sample

240615-hmgh5a1fpg
MD5

ad389201c02e4edbeff9b26be6b0ea58
SHA1

08b174b3890840b275aec4b6942772c61e07f4e4
SHA256

2891b08c134238beeb08582e3465d77c0fff2ac4bf2cd67162b7402b7246ace4
SHA512

b30a496bed466136c662f9b69b9504161203458d9fc5e5afbce6175a446402526705eb9c82637e6d4bcd264b26978704829786cb8ea5e6030fc6dedef611cd82
SSDEEP

49152:04PPcN/45z7p9PgYGG8BQBCqnNya/jK7:0UcO5F8eC+NT/

Score

10^/10

legion downloader

Malware Config

Targets

- Target
  
  ad389201c02e4edbeff9b26be6b0ea58_JaffaCakes118
- Size
  
  1.7MB
- MD5
  
  ad389201c02e4edbeff9b26be6b0ea58
- SHA1
  
  08b174b3890840b275aec4b6942772c61e07f4e4
- SHA256
  
  2891b08c134238beeb08582e3465d77c0fff2ac4bf2cd67162b7402b7246ace4
- SHA512
  
  b30a496bed466136c662f9b69b9504161203458d9fc5e5afbce6175a446402526705eb9c82637e6d4bcd264b26978704829786cb8ea5e6030fc6dedef611cd82
- SSDEEP
  
  49152:04PPcN/45z7p9PgYGG8BQBCqnNya/jK7:0UcO5F8eC+NT/
Score

6^/10
- Legitimate hosting services abused for malware hosting/C2
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

downloaderlegion

behavioral1

behavioral2