Overview
overview
4Static
static
1LeagueTagsv2.2.0.zip
windows7-x64
1LeagueTagsv2.2.0.zip
windows10-2004-x64
1LeagueTags...m.html
windows7-x64
1LeagueTags...m.html
windows10-2004-x64
1LeagueTags...ee.exe
windows7-x64
3LeagueTags...ee.exe
windows10-2004-x64
4LeagueTags...-0.dll
windows7-x64
1LeagueTags...-0.dll
windows10-2004-x64
1LeagueTags...-0.dll
windows7-x64
1LeagueTags...-0.dll
windows10-2004-x64
1LeagueTags...-0.dll
windows7-x64
3LeagueTags...-0.dll
windows10-2004-x64
3LeagueTags...-0.dll
windows7-x64
1LeagueTags...-0.dll
windows10-2004-x64
1LeagueTags...-0.dll
windows7-x64
3LeagueTags...-0.dll
windows10-2004-x64
3LeagueTags...-0.dll
windows7-x64
1LeagueTags...-0.dll
windows10-2004-x64
1LeagueTags...-0.dll
windows7-x64
1LeagueTags...-0.dll
windows10-2004-x64
1LeagueTags...-0.dll
windows7-x64
1LeagueTags...-0.dll
windows10-2004-x64
1LeagueTags...-0.dll
windows7-x64
1LeagueTags...-0.dll
windows10-2004-x64
1LeagueTags...-0.dll
windows7-x64
3LeagueTags...-0.dll
windows10-2004-x64
3LeagueTags...-0.dll
windows7-x64
1LeagueTags...-0.dll
windows10-2004-x64
1LeagueTags...-0.dll
windows7-x64
1LeagueTags...-0.dll
windows10-2004-x64
1LeagueTags...-0.dll
windows7-x64
1LeagueTags...-0.dll
windows10-2004-x64
1Analysis
-
max time kernel
83s -
max time network
158s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
03/04/2023, 04:26
Static task
static1
Behavioral task
behavioral1
Sample
LeagueTagsv2.2.0.zip
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
LeagueTagsv2.2.0.zip
Resource
win10v2004-20230221-en
Behavioral task
behavioral3
Sample
LeagueTagsFree-win32-ia32/LICENSES.chromium.html
Resource
win7-20230220-en
Behavioral task
behavioral4
Sample
LeagueTagsFree-win32-ia32/LICENSES.chromium.html
Resource
win10v2004-20230220-en
Behavioral task
behavioral5
Sample
LeagueTagsFree-win32-ia32/LeagueTagsFree.exe
Resource
win7-20230220-en
Behavioral task
behavioral6
Sample
LeagueTagsFree-win32-ia32/LeagueTagsFree.exe
Resource
win10v2004-20230220-en
Behavioral task
behavioral7
Sample
LeagueTagsFree-win32-ia32/api-ms-win-core-console-l1-1-0.dll
Resource
win7-20230220-en
Behavioral task
behavioral8
Sample
LeagueTagsFree-win32-ia32/api-ms-win-core-console-l1-1-0.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral9
Sample
LeagueTagsFree-win32-ia32/api-ms-win-core-datetime-l1-1-0.dll
Resource
win7-20230220-en
Behavioral task
behavioral10
Sample
LeagueTagsFree-win32-ia32/api-ms-win-core-datetime-l1-1-0.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral11
Sample
LeagueTagsFree-win32-ia32/api-ms-win-core-debug-l1-1-0.dll
Resource
win7-20230220-en
Behavioral task
behavioral12
Sample
LeagueTagsFree-win32-ia32/api-ms-win-core-debug-l1-1-0.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral13
Sample
LeagueTagsFree-win32-ia32/api-ms-win-core-errorhandling-l1-1-0.dll
Resource
win7-20230220-en
Behavioral task
behavioral14
Sample
LeagueTagsFree-win32-ia32/api-ms-win-core-errorhandling-l1-1-0.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral15
Sample
LeagueTagsFree-win32-ia32/api-ms-win-core-file-l1-1-0.dll
Resource
win7-20230220-en
Behavioral task
behavioral16
Sample
LeagueTagsFree-win32-ia32/api-ms-win-core-file-l1-1-0.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral17
Sample
LeagueTagsFree-win32-ia32/api-ms-win-core-file-l1-2-0.dll
Resource
win7-20230220-en
Behavioral task
behavioral18
Sample
LeagueTagsFree-win32-ia32/api-ms-win-core-file-l1-2-0.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral19
Sample
LeagueTagsFree-win32-ia32/api-ms-win-core-file-l2-1-0.dll
Resource
win7-20230220-en
Behavioral task
behavioral20
Sample
LeagueTagsFree-win32-ia32/api-ms-win-core-file-l2-1-0.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral21
Sample
LeagueTagsFree-win32-ia32/api-ms-win-core-handle-l1-1-0.dll
Resource
win7-20230220-en
Behavioral task
behavioral22
Sample
LeagueTagsFree-win32-ia32/api-ms-win-core-handle-l1-1-0.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral23
Sample
LeagueTagsFree-win32-ia32/api-ms-win-core-heap-l1-1-0.dll
Resource
win7-20230220-en
Behavioral task
behavioral24
Sample
LeagueTagsFree-win32-ia32/api-ms-win-core-heap-l1-1-0.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral25
Sample
LeagueTagsFree-win32-ia32/api-ms-win-core-interlocked-l1-1-0.dll
Resource
win7-20230220-en
Behavioral task
behavioral26
Sample
LeagueTagsFree-win32-ia32/api-ms-win-core-interlocked-l1-1-0.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral27
Sample
LeagueTagsFree-win32-ia32/api-ms-win-core-libraryloader-l1-1-0.dll
Resource
win7-20230220-en
Behavioral task
behavioral28
Sample
LeagueTagsFree-win32-ia32/api-ms-win-core-libraryloader-l1-1-0.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral29
Sample
LeagueTagsFree-win32-ia32/api-ms-win-core-localization-l1-2-0.dll
Resource
win7-20230220-en
Behavioral task
behavioral30
Sample
LeagueTagsFree-win32-ia32/api-ms-win-core-localization-l1-2-0.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral31
Sample
LeagueTagsFree-win32-ia32/api-ms-win-core-memory-l1-1-0.dll
Resource
win7-20230220-en
Behavioral task
behavioral32
Sample
LeagueTagsFree-win32-ia32/api-ms-win-core-memory-l1-1-0.dll
Resource
win10v2004-20230220-en
General
-
Target
LeagueTagsFree-win32-ia32/api-ms-win-core-libraryloader-l1-1-0.dll
-
Size
18KB
-
MD5
d0873e21721d04e20b6ffb038accf2f1
-
SHA1
9e39e505d80d67b347b19a349a1532746c1f7f88
-
SHA256
bb25ccf8694d1fcfce85a7159dcf6985fdb54728d29b021cb3d14242f65909ce
-
SHA512
4b7f2ad9ead6489e1ea0704cf5f1b1579baf1061b193d54cc6201ffdda890a8c8facb23091dfd851dd70d7922e0c7e95416f623c48ec25137ddd66e32df9a637
-
SSDEEP
384:yHvuBL3BmWPhWZTi00GftpBjNKnemenyAlvN9W/L:yWBL3BXYoinKne1yd
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 4368 wrote to memory of 552 4368 rundll32.exe 83 PID 4368 wrote to memory of 552 4368 rundll32.exe 83 PID 4368 wrote to memory of 552 4368 rundll32.exe 83
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\LeagueTagsFree-win32-ia32\api-ms-win-core-libraryloader-l1-1-0.dll,#11⤵
- Suspicious use of WriteProcessMemory
PID:4368 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\LeagueTagsFree-win32-ia32\api-ms-win-core-libraryloader-l1-1-0.dll,#12⤵PID:552
-