Analysis
-
max time kernel
148s -
max time network
158s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
04-11-2024 18:34
General
-
Target
LegionStealer V1 SRC/bin/Debug/legionstealer.exe
-
Size
4.5MB
-
MD5
4e3b1a3fbe54f485df9b449f85b2c761
-
SHA1
6450824ac372584e5066be766ef503fac3189a09
-
SHA256
5f4a0a9db28d595c4035c380e2a5d4d39a284232aa46dd0ddb91baad021abd76
-
SHA512
bdcf379cfa1a0ff02126e298db15cd2c9f3d9041ebb934aeb96142ba099926fd2ed3a5a53b271e7ab9d6c4d80cd66a6eb3d3438c34a45b33902afbce98c5dc43
-
SSDEEP
98304:e0FPMJ2FPMJcaFPMJ9wT7DFPMJkhzHdV5RPdnASGuA+i1iK8P:dgxV5Rm9uAmf
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\LegionStealer V1 SRC\bin\Debug\legionstealer.exe"C:\Users\Admin\AppData\Local\Temp\LegionStealer V1 SRC\bin\Debug\legionstealer.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
4.5MB
-
Filesize
5.6MB
-
Filesize
584KB
-
Filesize
72KB
-
Filesize
40KB
-
Filesize
7.7MB
-
Filesize
1.3MB
-
Filesize
80KB
-
Filesize
7.7MB
-
Filesize
240KB
-
Filesize
4KB
-
Filesize
7.7MB