Overview
overview
10Static
static
10LegionStea...der.js
windows7-x64
3LegionStea...der.js
windows10-2004-x64
3LegionStea...ts.vbs
windows7-x64
1LegionStea...ts.vbs
windows10-2004-x64
1LegionStea...ts.vbs
windows7-x64
1LegionStea...ts.vbs
windows10-2004-x64
1LegionStea...m1.vbs
windows7-x64
1LegionStea...m1.vbs
windows10-2004-x64
1LegionStea...ral.js
windows7-x64
3LegionStea...ral.js
windows10-2004-x64
3LegionStea...al.vbs
windows7-x64
1LegionStea...al.vbs
windows10-2004-x64
1LegionStea...in.vbs
windows7-x64
1LegionStea...in.vbs
windows10-2004-x64
1LegionStea...der.js
windows7-x64
3LegionStea...der.js
windows10-2004-x64
3LegionStea...er.vbs
windows7-x64
1LegionStea...er.vbs
windows10-2004-x64
1LegionStea...es.vbs
windows7-x64
1LegionStea...es.vbs
windows10-2004-x64
1LegionStea...ver.js
windows7-x64
3LegionStea...ver.js
windows10-2004-x64
3LegionStea...er.vbs
windows7-x64
1LegionStea...er.vbs
windows10-2004-x64
1LegionStea...lby.js
windows7-x64
3LegionStea...lby.js
windows10-2004-x64
3LegionStea...by.vbs
windows7-x64
1LegionStea...by.vbs
windows10-2004-x64
1LegionStea...er.exe
windows7-x64
3LegionStea...er.exe
windows10-2004-x64
3LegionStea...er.exe
windows7-x64
3LegionStea...er.exe
windows10-2004-x64
3Analysis
-
max time kernel
122s -
max time network
129s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
04-11-2024 18:34
Behavioral task
behavioral1
Sample
LegionStealer V1 SRC/Builder.js
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
LegionStealer V1 SRC/Builder.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
LegionStealer V1 SRC/Exploits.vbs
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
LegionStealer V1 SRC/Exploits.vbs
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
LegionStealer V1 SRC/Exploits.vbs
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
LegionStealer V1 SRC/Exploits.vbs
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
LegionStealer V1 SRC/Form1.vbs
Resource
win7-20241010-en
Behavioral task
behavioral8
Sample
LegionStealer V1 SRC/Form1.vbs
Resource
win10v2004-20241007-en
Behavioral task
behavioral9
Sample
LegionStealer V1 SRC/General.js
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
LegionStealer V1 SRC/General.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral11
Sample
LegionStealer V1 SRC/General.vbs
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
LegionStealer V1 SRC/General.vbs
Resource
win10v2004-20241007-en
Behavioral task
behavioral13
Sample
LegionStealer V1 SRC/Main.vbs
Resource
win7-20241010-en
Behavioral task
behavioral14
Sample
LegionStealer V1 SRC/Main.vbs
Resource
win10v2004-20241007-en
Behavioral task
behavioral15
Sample
LegionStealer V1 SRC/NewBuilder.js
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
LegionStealer V1 SRC/NewBuilder.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral17
Sample
LegionStealer V1 SRC/Properties/Resources.Designer.vbs
Resource
win7-20241010-en
Behavioral task
behavioral18
Sample
LegionStealer V1 SRC/Properties/Resources.Designer.vbs
Resource
win10v2004-20241007-en
Behavioral task
behavioral19
Sample
LegionStealer V1 SRC/Properties/Resources.vbs
Resource
win7-20240903-en
Behavioral task
behavioral20
Sample
LegionStealer V1 SRC/Properties/Resources.vbs
Resource
win10v2004-20241007-en
Behavioral task
behavioral21
Sample
LegionStealer V1 SRC/Sver.js
Resource
win7-20240903-en
Behavioral task
behavioral22
Sample
LegionStealer V1 SRC/Sver.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral23
Sample
LegionStealer V1 SRC/Sver.vbs
Resource
win7-20241010-en
Behavioral task
behavioral24
Sample
LegionStealer V1 SRC/Sver.vbs
Resource
win10v2004-20241007-en
Behavioral task
behavioral25
Sample
LegionStealer V1 SRC/asamlby.js
Resource
win7-20240903-en
Behavioral task
behavioral26
Sample
LegionStealer V1 SRC/asamlby.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral27
Sample
LegionStealer V1 SRC/asamlby.vbs
Resource
win7-20240729-en
Behavioral task
behavioral28
Sample
LegionStealer V1 SRC/asamlby.vbs
Resource
win10v2004-20241007-en
Behavioral task
behavioral29
Sample
LegionStealer V1 SRC/bin/Debug/My_Stealer_l3gion/legionstealer.exe
Resource
win7-20240903-en
Behavioral task
behavioral30
Sample
LegionStealer V1 SRC/bin/Debug/My_Stealer_l3gion/legionstealer.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral31
Sample
LegionStealer V1 SRC/bin/Debug/legionstealer.exe
Resource
win7-20240729-en
Behavioral task
behavioral32
Sample
LegionStealer V1 SRC/bin/Debug/legionstealer.exe
Resource
win10v2004-20241007-en
General
-
Target
LegionStealer V1 SRC/Builder.js
-
Size
12KB
-
MD5
053a5e9af2becc72bd49c5e015d89607
-
SHA1
5e0fa80185f89fa29ca71491a224ecc7a17f39fd
-
SHA256
7705f433f1e77ef2b8a5da38904574cbc3d5f519a9a430916d34135dce735134
-
SHA512
099ea9aafcdf61e708d2005b63900a089114b3a82a7a7987ce92a4126e1a36f0299f137b8882185816968730c7950b1196526925512469d7db8ef294a63f79ec
-
SSDEEP
192:9bpa2jr+VdDeHWdTd7uPBRqdATqihPyrsta5KfXOro+y7stb8TJ5KuQIO:9Va2WViko+GstATJ9O
Malware Config
Signatures
-
Command and Scripting Interpreter: JavaScript 1 TTPs