Overview
overview
10Static
static
10LegionStea...der.js
windows7-x64
3LegionStea...der.js
windows10-2004-x64
3LegionStea...ts.vbs
windows7-x64
1LegionStea...ts.vbs
windows10-2004-x64
1LegionStea...ts.vbs
windows7-x64
1LegionStea...ts.vbs
windows10-2004-x64
1LegionStea...m1.vbs
windows7-x64
1LegionStea...m1.vbs
windows10-2004-x64
1LegionStea...ral.js
windows7-x64
3LegionStea...ral.js
windows10-2004-x64
3LegionStea...al.vbs
windows7-x64
1LegionStea...al.vbs
windows10-2004-x64
1LegionStea...in.vbs
windows7-x64
1LegionStea...in.vbs
windows10-2004-x64
1LegionStea...der.js
windows7-x64
3LegionStea...der.js
windows10-2004-x64
3LegionStea...er.vbs
windows7-x64
1LegionStea...er.vbs
windows10-2004-x64
1LegionStea...es.vbs
windows7-x64
1LegionStea...es.vbs
windows10-2004-x64
1LegionStea...ver.js
windows7-x64
3LegionStea...ver.js
windows10-2004-x64
3LegionStea...er.vbs
windows7-x64
1LegionStea...er.vbs
windows10-2004-x64
1LegionStea...lby.js
windows7-x64
3LegionStea...lby.js
windows10-2004-x64
3LegionStea...by.vbs
windows7-x64
1LegionStea...by.vbs
windows10-2004-x64
1LegionStea...er.exe
windows7-x64
3LegionStea...er.exe
windows10-2004-x64
3LegionStea...er.exe
windows7-x64
3LegionStea...er.exe
windows10-2004-x64
3Analysis
- max time kernel
142s - max time network
159s - platform
windows10-2004_x64 - resource
win10v2004-20241007-en - resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system - submitted
04/11/2024, 18:34
Behavioral task
behavioral1
Sample
LegionStealer V1 SRC/Builder.js
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
LegionStealer V1 SRC/Builder.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
LegionStealer V1 SRC/Exploits.vbs
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
LegionStealer V1 SRC/Exploits.vbs
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
LegionStealer V1 SRC/Exploits.vbs
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
LegionStealer V1 SRC/Exploits.vbs
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
LegionStealer V1 SRC/Form1.vbs
Resource
win7-20241010-en
Behavioral task
behavioral8
Sample
LegionStealer V1 SRC/Form1.vbs
Resource
win10v2004-20241007-en
Behavioral task
behavioral9
Sample
LegionStealer V1 SRC/General.js
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
LegionStealer V1 SRC/General.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral11
Sample
LegionStealer V1 SRC/General.vbs
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
LegionStealer V1 SRC/General.vbs
Resource
win10v2004-20241007-en
Behavioral task
behavioral13
Sample
LegionStealer V1 SRC/Main.vbs
Resource
win7-20241010-en
Behavioral task
behavioral14
Sample
LegionStealer V1 SRC/Main.vbs
Resource
win10v2004-20241007-en
Behavioral task
behavioral15
Sample
LegionStealer V1 SRC/NewBuilder.js
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
LegionStealer V1 SRC/NewBuilder.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral17
Sample
LegionStealer V1 SRC/Properties/Resources.Designer.vbs
Resource
win7-20241010-en
Behavioral task
behavioral18
Sample
LegionStealer V1 SRC/Properties/Resources.Designer.vbs
Resource
win10v2004-20241007-en
Behavioral task
behavioral19
Sample
LegionStealer V1 SRC/Properties/Resources.vbs
Resource
win7-20240903-en
Behavioral task
behavioral20
Sample
LegionStealer V1 SRC/Properties/Resources.vbs
Resource
win10v2004-20241007-en
Behavioral task
behavioral21
Sample
LegionStealer V1 SRC/Sver.js
Resource
win7-20240903-en
Behavioral task
behavioral22
Sample
LegionStealer V1 SRC/Sver.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral23
Sample
LegionStealer V1 SRC/Sver.vbs
Resource
win7-20241010-en
Behavioral task
behavioral24
Sample
LegionStealer V1 SRC/Sver.vbs
Resource
win10v2004-20241007-en
Behavioral task
behavioral25
Sample
LegionStealer V1 SRC/asamlby.js
Resource
win7-20240903-en
Behavioral task
behavioral26
Sample
LegionStealer V1 SRC/asamlby.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral27
Sample
LegionStealer V1 SRC/asamlby.vbs
Resource
win7-20240729-en
Behavioral task
behavioral28
Sample
LegionStealer V1 SRC/asamlby.vbs
Resource
win10v2004-20241007-en
Behavioral task
behavioral29
Sample
LegionStealer V1 SRC/bin/Debug/My_Stealer_l3gion/legionstealer.exe
Resource
win7-20240903-en
Behavioral task
behavioral30
Sample
LegionStealer V1 SRC/bin/Debug/My_Stealer_l3gion/legionstealer.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral31
Sample
LegionStealer V1 SRC/bin/Debug/legionstealer.exe
Resource
win7-20240729-en
Behavioral task
behavioral32
Sample
LegionStealer V1 SRC/bin/Debug/legionstealer.exe
Resource
win10v2004-20241007-en
General
- Target LegionStealer V1 SRC/Builder.js
- Size 12KB
- Sample241104-w79x3axner
- SHA256 7705f433f1e77ef2b8a5da38904574cbc3d5f519a9a430916d34135dce735134
- MD5 053a5e9af2becc72bd49c5e015d89607
- SHA1 5e0fa80185f89fa29ca71491a224ecc7a17f39fd
- SHA512 099ea9aafcdf61e708d2005b63900a089114b3a82a7a7987ce92a4126e1a36f0299f137b8882185816968730c7950b1196526925512469d7db8ef294a63f79ec
- SSDEEP 192:9bpa2jr+VdDeHWdTd7uPBRqdATqihPyrsta5KfXOro+y7stb8TJ5KuQIO:9Va2WViko+GstATJ9O
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Command and Scripting Interpreter: JavaScript 1 TTPs