Analysis
-
max time kernel
123s -
max time network
129s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
-
submitted
03/04/2023, 04:26
General
-
Target
LeagueTagsFree-win32-ia32/api-ms-win-core-file-l1-1-0.dll
-
Size
21KB
-
MD5
94ae25c7a5497ca0be6882a00644ca64
-
SHA1
f7ac28bbc47e46485025a51eeb6c304b70cee215
-
SHA256
7ea06b7050f9ea2bcc12af34374bdf1173646d4e5ebf66ad690b37f4df5f3d4e
-
SHA512
83e570b79111706742d0684fc16207ae87a78fa7ffef58b40aa50a6b9a2c2f77fe023af732ef577fb7cd2666e33ffaf0e427f41ca04075d83e0f6a52a177c2b0
-
SSDEEP
384:d6PvVXHWPhWnsnhi00GftpBjaJemyDlD16PamW8:UPvVX85nhoisJeLt8
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\LeagueTagsFree-win32-ia32\api-ms-win-core-file-l1-1-0.dll,#11⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\LeagueTagsFree-win32-ia32\api-ms-win-core-file-l1-1-0.dll,#12⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 704 -s 6083⤵
- Program crash
-
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 456 -p 704 -ip 7041⤵