7d396a2e388177cfde1f8e462ed0bf581c409874e46db0d09cbf083e67df681f | Triage

Analysis

max time kernel
120s
max time network
127s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
04-11-2024 18:34

Sharing

Report Analysis Logs

General

Target

LegionStealer V1 SRC/asamlby.js
Size

5KB
MD5

c54437eea218c3109241012833c2a73a
SHA1

0ba93124c40fb57d6e21c88cd3e3c59f7ffc6a58
SHA256

f665c51d2581d7c112905b458eb709d034d51dcdc5b7fe825838d571e3e38411
SHA512

6271b1529ee69085695685f720d102d36175549291bce16858998c83dbb6e825924378832ea6a990b725a6118e9f5741d35d4fcfac99d147bac62a320deacd9d
SSDEEP

96:Jo4h4Dcz02nXVL1UVZyHCL47hq7PIIicB28KeKnFV8+:9KGpFuEHWowPIIdseKFC+

Score

3^/10

execution

Malware Config

Signatures

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

C:\Windows\system32\wscript.exe
wscript.exe "C:\Users\Admin\AppData\Local\Temp\LegionStealer V1 SRC\asamlby.js"
1⤵
PID:2520

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads