7d396a2e388177cfde1f8e462ed0bf581c409874e46db0d09cbf083e67df681f | Triage

Analysis

max time kernel
121s
max time network
132s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
04-11-2024 18:34

Sharing

Report Analysis Logs

General

Target

LegionStealer V1 SRC/Sver.js
Size

4KB
MD5

ad570021f48c37ed3248ab1487fa69ee
SHA1

6be9e24a5a25e7a972c2a2fad97198ea03ea9389
SHA256

e447e1df5e38c63b54aeb0f75e9146164d62d1cfb79a8f40b085c76ca826d1ce
SHA512

446fae1ee43ffd025ef8bbe74c2942e128f7befc62186e276a367976be2536059164c6ca8a9d86c949e85cff3ca7f24715cd40806b627dec3262d0f2f9600d45
SSDEEP

96:io4h4Dcz0U2nzXVgoOWFd+Ew75ptqYow1ihJ0fmUJKvX0k:4KGyRVdI7XtDnfm/b

Score

3^/10

execution

Malware Config

Signatures

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

C:\Windows\system32\wscript.exe
wscript.exe "C:\Users\Admin\AppData\Local\Temp\LegionStealer V1 SRC\Sver.js"
1⤵
PID:1924

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads