Overview
overview
4Static
static
1LeagueTagsv2.2.0.zip
windows7-x64
1LeagueTagsv2.2.0.zip
windows10-2004-x64
1LeagueTags...m.html
windows7-x64
1LeagueTags...m.html
windows10-2004-x64
1LeagueTags...ee.exe
windows7-x64
3LeagueTags...ee.exe
windows10-2004-x64
4LeagueTags...-0.dll
windows7-x64
1LeagueTags...-0.dll
windows10-2004-x64
1LeagueTags...-0.dll
windows7-x64
1LeagueTags...-0.dll
windows10-2004-x64
1LeagueTags...-0.dll
windows7-x64
3LeagueTags...-0.dll
windows10-2004-x64
3LeagueTags...-0.dll
windows7-x64
1LeagueTags...-0.dll
windows10-2004-x64
1LeagueTags...-0.dll
windows7-x64
3LeagueTags...-0.dll
windows10-2004-x64
3LeagueTags...-0.dll
windows7-x64
1LeagueTags...-0.dll
windows10-2004-x64
1LeagueTags...-0.dll
windows7-x64
1LeagueTags...-0.dll
windows10-2004-x64
1LeagueTags...-0.dll
windows7-x64
1LeagueTags...-0.dll
windows10-2004-x64
1LeagueTags...-0.dll
windows7-x64
1LeagueTags...-0.dll
windows10-2004-x64
1LeagueTags...-0.dll
windows7-x64
3LeagueTags...-0.dll
windows10-2004-x64
3LeagueTags...-0.dll
windows7-x64
1LeagueTags...-0.dll
windows10-2004-x64
1LeagueTags...-0.dll
windows7-x64
1LeagueTags...-0.dll
windows10-2004-x64
1LeagueTags...-0.dll
windows7-x64
1LeagueTags...-0.dll
windows10-2004-x64
1Analysis
-
max time kernel
24s -
max time network
30s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system -
submitted
03/04/2023, 04:26
Static task
static1
Behavioral task
behavioral1
Sample
LeagueTagsv2.2.0.zip
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
LeagueTagsv2.2.0.zip
Resource
win10v2004-20230221-en
Behavioral task
behavioral3
Sample
LeagueTagsFree-win32-ia32/LICENSES.chromium.html
Resource
win7-20230220-en
Behavioral task
behavioral4
Sample
LeagueTagsFree-win32-ia32/LICENSES.chromium.html
Resource
win10v2004-20230220-en
Behavioral task
behavioral5
Sample
LeagueTagsFree-win32-ia32/LeagueTagsFree.exe
Resource
win7-20230220-en
Behavioral task
behavioral6
Sample
LeagueTagsFree-win32-ia32/LeagueTagsFree.exe
Resource
win10v2004-20230220-en
Behavioral task
behavioral7
Sample
LeagueTagsFree-win32-ia32/api-ms-win-core-console-l1-1-0.dll
Resource
win7-20230220-en
Behavioral task
behavioral8
Sample
LeagueTagsFree-win32-ia32/api-ms-win-core-console-l1-1-0.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral9
Sample
LeagueTagsFree-win32-ia32/api-ms-win-core-datetime-l1-1-0.dll
Resource
win7-20230220-en
Behavioral task
behavioral10
Sample
LeagueTagsFree-win32-ia32/api-ms-win-core-datetime-l1-1-0.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral11
Sample
LeagueTagsFree-win32-ia32/api-ms-win-core-debug-l1-1-0.dll
Resource
win7-20230220-en
Behavioral task
behavioral12
Sample
LeagueTagsFree-win32-ia32/api-ms-win-core-debug-l1-1-0.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral13
Sample
LeagueTagsFree-win32-ia32/api-ms-win-core-errorhandling-l1-1-0.dll
Resource
win7-20230220-en
Behavioral task
behavioral14
Sample
LeagueTagsFree-win32-ia32/api-ms-win-core-errorhandling-l1-1-0.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral15
Sample
LeagueTagsFree-win32-ia32/api-ms-win-core-file-l1-1-0.dll
Resource
win7-20230220-en
Behavioral task
behavioral16
Sample
LeagueTagsFree-win32-ia32/api-ms-win-core-file-l1-1-0.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral17
Sample
LeagueTagsFree-win32-ia32/api-ms-win-core-file-l1-2-0.dll
Resource
win7-20230220-en
Behavioral task
behavioral18
Sample
LeagueTagsFree-win32-ia32/api-ms-win-core-file-l1-2-0.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral19
Sample
LeagueTagsFree-win32-ia32/api-ms-win-core-file-l2-1-0.dll
Resource
win7-20230220-en
Behavioral task
behavioral20
Sample
LeagueTagsFree-win32-ia32/api-ms-win-core-file-l2-1-0.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral21
Sample
LeagueTagsFree-win32-ia32/api-ms-win-core-handle-l1-1-0.dll
Resource
win7-20230220-en
Behavioral task
behavioral22
Sample
LeagueTagsFree-win32-ia32/api-ms-win-core-handle-l1-1-0.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral23
Sample
LeagueTagsFree-win32-ia32/api-ms-win-core-heap-l1-1-0.dll
Resource
win7-20230220-en
Behavioral task
behavioral24
Sample
LeagueTagsFree-win32-ia32/api-ms-win-core-heap-l1-1-0.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral25
Sample
LeagueTagsFree-win32-ia32/api-ms-win-core-interlocked-l1-1-0.dll
Resource
win7-20230220-en
Behavioral task
behavioral26
Sample
LeagueTagsFree-win32-ia32/api-ms-win-core-interlocked-l1-1-0.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral27
Sample
LeagueTagsFree-win32-ia32/api-ms-win-core-libraryloader-l1-1-0.dll
Resource
win7-20230220-en
Behavioral task
behavioral28
Sample
LeagueTagsFree-win32-ia32/api-ms-win-core-libraryloader-l1-1-0.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral29
Sample
LeagueTagsFree-win32-ia32/api-ms-win-core-localization-l1-2-0.dll
Resource
win7-20230220-en
Behavioral task
behavioral30
Sample
LeagueTagsFree-win32-ia32/api-ms-win-core-localization-l1-2-0.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral31
Sample
LeagueTagsFree-win32-ia32/api-ms-win-core-memory-l1-1-0.dll
Resource
win7-20230220-en
Behavioral task
behavioral32
Sample
LeagueTagsFree-win32-ia32/api-ms-win-core-memory-l1-1-0.dll
Resource
win10v2004-20230220-en
General
-
Target
LeagueTagsFree-win32-ia32/api-ms-win-core-file-l2-1-0.dll
-
Size
17KB
-
MD5
e479444bdd4ae4577fd32314a68f5d28
-
SHA1
77edf9509a252e886d4da388bf9c9294d95498eb
-
SHA256
c85dc081b1964b77d289aac43cc64746e7b141d036f248a731601eb98f827719
-
SHA512
2afab302fe0f7476a4254714575d77b584cd2dc5330b9b25b852cd71267cda365d280f9aa8d544d4687dc388a2614a51c0418864c41ad389e1e847d81c3ab744
-
SSDEEP
192:BZwWIghWG4U9ydsNtL/123Ouo+Uggs/nGfe4pBjSbUGHvNWh0txKdmVWQ4CWVU9h:UWPhWFBsnhi00GftpBjKvxemPlP55QQ7
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 7 IoCs
description pid Process procid_target PID 1408 wrote to memory of 1440 1408 rundll32.exe 28 PID 1408 wrote to memory of 1440 1408 rundll32.exe 28 PID 1408 wrote to memory of 1440 1408 rundll32.exe 28 PID 1408 wrote to memory of 1440 1408 rundll32.exe 28 PID 1408 wrote to memory of 1440 1408 rundll32.exe 28 PID 1408 wrote to memory of 1440 1408 rundll32.exe 28 PID 1408 wrote to memory of 1440 1408 rundll32.exe 28
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\LeagueTagsFree-win32-ia32\api-ms-win-core-file-l2-1-0.dll,#11⤵
- Suspicious use of WriteProcessMemory
PID:1408 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\LeagueTagsFree-win32-ia32\api-ms-win-core-file-l2-1-0.dll,#12⤵PID:1440
-