Legion Stealer

#ParsedReport #CompletenessMedium
11-07-2023

Legion Stealer targeting PUBG players

Report completeness: Medium

Actors/Campaigns:
Dev-0960

Threats:
Legion_stealer
Legion
Meteor_wiper
Beacon
Credential_dumping_technique

Victims:
Players of popular game playerunknown’s battle grounds (pubg)

Industry:
Entertainment

TTPs:
Tactics: 6
Technics: 16

IOCs:
File: 8
Command: 1
Registry: 3
Hash: 2

Soft:
microsoft visual studio, visual studio, windows defender, lox stud, chrome, chromium, comodo dragon, opera, slimjet, vivaldi, have more…

Wallets:
zcash, jaxx, electrum, atomicwallet, guarda_wallet, coinomi

Crypto:
ethereum

Algorithms:
sha256, zip, sha1

Functions:
GetPasswords, GetCookies

https://cyble.com/blog/legion-stealer-targeting-pubg-players/