Analysis
-
max time kernel
154s -
max time network
166s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
-
submitted
03-04-2023 04:26
General
-
Target
LeagueTagsFree-win32-ia32/api-ms-win-core-debug-l1-1-0.dll
-
Size
17KB
-
MD5
88ff191fd8648099592ed28ee6c442a5
-
SHA1
6a4f818b53606a5602c609ec343974c2103bc9cc
-
SHA256
c310cc91464c9431ab0902a561af947fa5c973925ff70482d3de017ed3f73b7d
-
SHA512
942ae86550d4a4886dac909898621dab18512c20f3d694a8ad444220aead76fa88c481df39f93c7074dbbc31c3b4daf97099cfed86c2a0aaa4b63190a4b307fd
-
SSDEEP
384:cWPhWM4Ri00GftpBj2YILemtclD16PaEC:l10oiBQe/L
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\LeagueTagsFree-win32-ia32\api-ms-win-core-debug-l1-1-0.dll,#11⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\LeagueTagsFree-win32-ia32\api-ms-win-core-debug-l1-1-0.dll,#12⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1892 -s 6003⤵
- Program crash
-
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1892 -ip 18921⤵