Overview

overview

10

Static

static

10

d103074755...18.exe

windows7-x64

6

d103074755...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

Errors

Reason
config extraction: missing cfgextr callback for rule "legion_loader"

General

  • Target

    d103074755792906a0aab038103444e3_JaffaCakes118

  • Size

    184KB

  • MD5

    d103074755792906a0aab038103444e3

  • SHA1

    ffb8d5a1d2d3dda1fa013168017bd833aaa28064

  • SHA256

    2b61b3b00aa5d548e41dc305cb1271c26dc387601a7a7cdb63600b49c270bb30

  • SHA512

    30be12dba187e19d797e6a5b502185ac37848ef80e9431e0cfb98c4b64c104f122fa2101538a0805513b7658bc8585a31ce0a8f00b725f33b8f70645e82e4660

  • SSDEEP

    3072:oUZF2pKMp8r2+6LqAlkNQu2BaYP138oC2C5L:PZF2jpwARBsXL

Score
10/10
downloaderlegion

Malware Config

Signatures

  • Legion downloader 1 IoCs

    Detected Legion downloader HTTP request code and PowerShell execution.

    downloader
  • Legion family
    legion
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d103074755792906a0aab038103444e3_JaffaCakes118
    .exe windows:6 windows x86 arch:x86

    16a80e323bb12dca5944a63e26c95aab


    Headers

    Imports

    Sections