Analysis
-
max time kernel
89s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
-
submitted
03/04/2023, 04:26
General
-
Target
LeagueTagsFree-win32-ia32/api-ms-win-core-errorhandling-l1-1-0.dll
-
Size
17KB
-
MD5
6d778e83f74a4c7fe4c077dc279f6867
-
SHA1
f5d9cf848f79a57f690da9841c209b4837c2e6c3
-
SHA256
a97dcca76cdb12e985dff71040815f28508c655ab2b073512e386dd63f4da325
-
SHA512
02ef01583a265532d3970b7d520728aa9b68f2b7c309ee66bd2b38baf473ef662c9d7a223acf2da722587429da6e4fbc0496253ba5c41e214bea240ce824e8a2
-
SSDEEP
192:NFmxD3PWIghWGJY/luZo123Ouo+Uggs/nGfe4pBjSffcp8Wh0txKdmVWQ4yWRzOr:NFkWPhW60i00GftpBj4emHlD16Pa7v
Score
1/10
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\LeagueTagsFree-win32-ia32\api-ms-win-core-errorhandling-l1-1-0.dll,#11⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\LeagueTagsFree-win32-ia32\api-ms-win-core-errorhandling-l1-1-0.dll,#12⤵
-