Overview
overview
4Static
static
1LeagueTagsv2.2.0.zip
windows7-x64
1LeagueTagsv2.2.0.zip
windows10-2004-x64
1LeagueTags...m.html
windows7-x64
1LeagueTags...m.html
windows10-2004-x64
1LeagueTags...ee.exe
windows7-x64
3LeagueTags...ee.exe
windows10-2004-x64
4LeagueTags...-0.dll
windows7-x64
1LeagueTags...-0.dll
windows10-2004-x64
1LeagueTags...-0.dll
windows7-x64
1LeagueTags...-0.dll
windows10-2004-x64
1LeagueTags...-0.dll
windows7-x64
3LeagueTags...-0.dll
windows10-2004-x64
3LeagueTags...-0.dll
windows7-x64
1LeagueTags...-0.dll
windows10-2004-x64
1LeagueTags...-0.dll
windows7-x64
3LeagueTags...-0.dll
windows10-2004-x64
3LeagueTags...-0.dll
windows7-x64
1LeagueTags...-0.dll
windows10-2004-x64
1LeagueTags...-0.dll
windows7-x64
1LeagueTags...-0.dll
windows10-2004-x64
1LeagueTags...-0.dll
windows7-x64
1LeagueTags...-0.dll
windows10-2004-x64
1LeagueTags...-0.dll
windows7-x64
1LeagueTags...-0.dll
windows10-2004-x64
1LeagueTags...-0.dll
windows7-x64
3LeagueTags...-0.dll
windows10-2004-x64
3LeagueTags...-0.dll
windows7-x64
1LeagueTags...-0.dll
windows10-2004-x64
1LeagueTags...-0.dll
windows7-x64
1LeagueTags...-0.dll
windows10-2004-x64
1LeagueTags...-0.dll
windows7-x64
1LeagueTags...-0.dll
windows10-2004-x64
1Analysis
-
max time kernel
133s -
max time network
157s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
03-04-2023 04:26
Static task
static1
Behavioral task
behavioral1
Sample
LeagueTagsv2.2.0.zip
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
LeagueTagsv2.2.0.zip
Resource
win10v2004-20230221-en
Behavioral task
behavioral3
Sample
LeagueTagsFree-win32-ia32/LICENSES.chromium.html
Resource
win7-20230220-en
Behavioral task
behavioral4
Sample
LeagueTagsFree-win32-ia32/LICENSES.chromium.html
Resource
win10v2004-20230220-en
Behavioral task
behavioral5
Sample
LeagueTagsFree-win32-ia32/LeagueTagsFree.exe
Resource
win7-20230220-en
Behavioral task
behavioral6
Sample
LeagueTagsFree-win32-ia32/LeagueTagsFree.exe
Resource
win10v2004-20230220-en
Behavioral task
behavioral7
Sample
LeagueTagsFree-win32-ia32/api-ms-win-core-console-l1-1-0.dll
Resource
win7-20230220-en
Behavioral task
behavioral8
Sample
LeagueTagsFree-win32-ia32/api-ms-win-core-console-l1-1-0.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral9
Sample
LeagueTagsFree-win32-ia32/api-ms-win-core-datetime-l1-1-0.dll
Resource
win7-20230220-en
Behavioral task
behavioral10
Sample
LeagueTagsFree-win32-ia32/api-ms-win-core-datetime-l1-1-0.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral11
Sample
LeagueTagsFree-win32-ia32/api-ms-win-core-debug-l1-1-0.dll
Resource
win7-20230220-en
Behavioral task
behavioral12
Sample
LeagueTagsFree-win32-ia32/api-ms-win-core-debug-l1-1-0.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral13
Sample
LeagueTagsFree-win32-ia32/api-ms-win-core-errorhandling-l1-1-0.dll
Resource
win7-20230220-en
Behavioral task
behavioral14
Sample
LeagueTagsFree-win32-ia32/api-ms-win-core-errorhandling-l1-1-0.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral15
Sample
LeagueTagsFree-win32-ia32/api-ms-win-core-file-l1-1-0.dll
Resource
win7-20230220-en
Behavioral task
behavioral16
Sample
LeagueTagsFree-win32-ia32/api-ms-win-core-file-l1-1-0.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral17
Sample
LeagueTagsFree-win32-ia32/api-ms-win-core-file-l1-2-0.dll
Resource
win7-20230220-en
Behavioral task
behavioral18
Sample
LeagueTagsFree-win32-ia32/api-ms-win-core-file-l1-2-0.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral19
Sample
LeagueTagsFree-win32-ia32/api-ms-win-core-file-l2-1-0.dll
Resource
win7-20230220-en
Behavioral task
behavioral20
Sample
LeagueTagsFree-win32-ia32/api-ms-win-core-file-l2-1-0.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral21
Sample
LeagueTagsFree-win32-ia32/api-ms-win-core-handle-l1-1-0.dll
Resource
win7-20230220-en
Behavioral task
behavioral22
Sample
LeagueTagsFree-win32-ia32/api-ms-win-core-handle-l1-1-0.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral23
Sample
LeagueTagsFree-win32-ia32/api-ms-win-core-heap-l1-1-0.dll
Resource
win7-20230220-en
Behavioral task
behavioral24
Sample
LeagueTagsFree-win32-ia32/api-ms-win-core-heap-l1-1-0.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral25
Sample
LeagueTagsFree-win32-ia32/api-ms-win-core-interlocked-l1-1-0.dll
Resource
win7-20230220-en
Behavioral task
behavioral26
Sample
LeagueTagsFree-win32-ia32/api-ms-win-core-interlocked-l1-1-0.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral27
Sample
LeagueTagsFree-win32-ia32/api-ms-win-core-libraryloader-l1-1-0.dll
Resource
win7-20230220-en
Behavioral task
behavioral28
Sample
LeagueTagsFree-win32-ia32/api-ms-win-core-libraryloader-l1-1-0.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral29
Sample
LeagueTagsFree-win32-ia32/api-ms-win-core-localization-l1-2-0.dll
Resource
win7-20230220-en
Behavioral task
behavioral30
Sample
LeagueTagsFree-win32-ia32/api-ms-win-core-localization-l1-2-0.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral31
Sample
LeagueTagsFree-win32-ia32/api-ms-win-core-memory-l1-1-0.dll
Resource
win7-20230220-en
Behavioral task
behavioral32
Sample
LeagueTagsFree-win32-ia32/api-ms-win-core-memory-l1-1-0.dll
Resource
win10v2004-20230220-en
General
-
Target
LeagueTagsFree-win32-ia32/api-ms-win-core-localization-l1-2-0.dll
-
Size
20KB
-
MD5
eff11130bfe0d9c90c0026bf2fb219ae
-
SHA1
cf4c89a6e46090d3d8feeb9eb697aea8a26e4088
-
SHA256
03ad57c24ff2cf895b5f533f0ecbd10266fd8634c6b9053cc9cb33b814ad5d97
-
SHA512
8133fb9f6b92f498413db3140a80d6624a705f80d9c7ae627dfd48adeb8c5305a61351bf27bbf02b4d3961f9943e26c55c2a66976251bb61ef1537bc8c212add
-
SSDEEP
384:KOMw3zdp3bwjGjue9/0jCRrndbVWPhWIDz6i00GftpBj6cemjlD16Pa+4r:KOMwBprwjGjue9/0jCRrndbCOoireqv
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 4620 wrote to memory of 3520 4620 rundll32.exe 84 PID 4620 wrote to memory of 3520 4620 rundll32.exe 84 PID 4620 wrote to memory of 3520 4620 rundll32.exe 84
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\LeagueTagsFree-win32-ia32\api-ms-win-core-localization-l1-2-0.dll,#11⤵
- Suspicious use of WriteProcessMemory
PID:4620 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\LeagueTagsFree-win32-ia32\api-ms-win-core-localization-l1-2-0.dll,#12⤵PID:3520
-