c79f3697cc8671dd38370f3ce88dd86792ee0f183f0aa4cbdc1603df4eba2d8a

Submit
Reports

Overview

overview

Static

static

LeagueTagsv2.2.0.zip

windows7-x64

LeagueTagsv2.2.0.zip

windows10-2004-x64

LeagueTags...m.html

windows7-x64

LeagueTags...m.html

windows10-2004-x64

LeagueTags...ee.exe

windows7-x64

LeagueTags...ee.exe

windows10-2004-x64

LeagueTags...-0.dll

windows7-x64

LeagueTags...-0.dll

windows10-2004-x64

LeagueTags...-0.dll

windows7-x64

LeagueTags...-0.dll

windows10-2004-x64

LeagueTags...-0.dll

windows7-x64

LeagueTags...-0.dll

windows10-2004-x64

LeagueTags...-0.dll

windows7-x64

LeagueTags...-0.dll

windows10-2004-x64

LeagueTags...-0.dll

windows7-x64

LeagueTags...-0.dll

windows10-2004-x64

LeagueTags...-0.dll

windows7-x64

LeagueTags...-0.dll

windows10-2004-x64

LeagueTags...-0.dll

windows7-x64

LeagueTags...-0.dll

windows10-2004-x64

LeagueTags...-0.dll

windows7-x64

LeagueTags...-0.dll

windows10-2004-x64

LeagueTags...-0.dll

windows7-x64

LeagueTags...-0.dll

windows10-2004-x64

LeagueTags...-0.dll

windows7-x64

LeagueTags...-0.dll

windows10-2004-x64

LeagueTags...-0.dll

windows7-x64

LeagueTags...-0.dll

windows10-2004-x64

LeagueTags...-0.dll

windows7-x64

LeagueTags...-0.dll

windows10-2004-x64

LeagueTags...-0.dll

windows7-x64

LeagueTags...-0.dll

windows10-2004-x64

Analysis

max time kernel
21s
max time network
29s
platform
windows7_x64
resource
win7-20230220-en
resource tags

arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
submitted
03-04-2023 04:26

Sharing

Copy URL

Twitter E-mail

Static task

static1

Behavioral task

behavioral1

Sample

LeagueTagsv2.2.0.zip

Resource

win7-20230220-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

LeagueTagsv2.2.0.zip

Resource

win10v2004-20230221-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

LeagueTagsFree-win32-ia32/LICENSES.chromium.html

Resource

win7-20230220-en

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral4

Sample

LeagueTagsFree-win32-ia32/LICENSES.chromium.html

Resource

win10v2004-20230220-en

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral5

Sample

LeagueTagsFree-win32-ia32/LeagueTagsFree.exe

Resource

win7-20230220-en

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral6

Sample

LeagueTagsFree-win32-ia32/LeagueTagsFree.exe

Resource

win10v2004-20230220-en

windows10-2004-x64

9 signatures

150 seconds

Behavioral task

behavioral7

Sample

LeagueTagsFree-win32-ia32/api-ms-win-core-console-l1-1-0.dll

Resource

win7-20230220-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral8

Sample

LeagueTagsFree-win32-ia32/api-ms-win-core-console-l1-1-0.dll

Resource

win10v2004-20230220-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral9

Sample

LeagueTagsFree-win32-ia32/api-ms-win-core-datetime-l1-1-0.dll

Resource

win7-20230220-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral10

Sample

LeagueTagsFree-win32-ia32/api-ms-win-core-datetime-l1-1-0.dll

Resource

win10v2004-20230220-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral11

Sample

LeagueTagsFree-win32-ia32/api-ms-win-core-debug-l1-1-0.dll

Resource

win7-20230220-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral12

Sample

LeagueTagsFree-win32-ia32/api-ms-win-core-debug-l1-1-0.dll

Resource

win10v2004-20230220-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral13

Sample

LeagueTagsFree-win32-ia32/api-ms-win-core-errorhandling-l1-1-0.dll

Resource

win7-20230220-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral14

Sample

LeagueTagsFree-win32-ia32/api-ms-win-core-errorhandling-l1-1-0.dll

Resource

win10v2004-20230220-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral15

Sample

LeagueTagsFree-win32-ia32/api-ms-win-core-file-l1-1-0.dll

Resource

win7-20230220-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral16

Sample

LeagueTagsFree-win32-ia32/api-ms-win-core-file-l1-1-0.dll

Resource

win10v2004-20230220-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral17

Sample

LeagueTagsFree-win32-ia32/api-ms-win-core-file-l1-2-0.dll

Resource

win7-20230220-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral18

Sample

LeagueTagsFree-win32-ia32/api-ms-win-core-file-l1-2-0.dll

Resource

win10v2004-20230220-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral19

Sample

LeagueTagsFree-win32-ia32/api-ms-win-core-file-l2-1-0.dll

Resource

win7-20230220-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral20

Sample

LeagueTagsFree-win32-ia32/api-ms-win-core-file-l2-1-0.dll

Resource

win10v2004-20230220-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral21

Sample

LeagueTagsFree-win32-ia32/api-ms-win-core-handle-l1-1-0.dll

Resource

win7-20230220-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral22

Sample

LeagueTagsFree-win32-ia32/api-ms-win-core-handle-l1-1-0.dll

Resource

win10v2004-20230220-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral23

Sample

LeagueTagsFree-win32-ia32/api-ms-win-core-heap-l1-1-0.dll

Resource

win7-20230220-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral24

Sample

LeagueTagsFree-win32-ia32/api-ms-win-core-heap-l1-1-0.dll

Resource

win10v2004-20230220-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral25

Sample

LeagueTagsFree-win32-ia32/api-ms-win-core-interlocked-l1-1-0.dll

Resource

win7-20230220-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral26

Sample

LeagueTagsFree-win32-ia32/api-ms-win-core-interlocked-l1-1-0.dll

Resource

win10v2004-20230220-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral27

Sample

LeagueTagsFree-win32-ia32/api-ms-win-core-libraryloader-l1-1-0.dll

Resource

win7-20230220-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral28

Sample

LeagueTagsFree-win32-ia32/api-ms-win-core-libraryloader-l1-1-0.dll

Resource

win10v2004-20230220-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral29

Sample

LeagueTagsFree-win32-ia32/api-ms-win-core-localization-l1-2-0.dll

Resource

win7-20230220-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral30

Sample

LeagueTagsFree-win32-ia32/api-ms-win-core-localization-l1-2-0.dll

Resource

win10v2004-20230220-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral31

Sample

LeagueTagsFree-win32-ia32/api-ms-win-core-memory-l1-1-0.dll

Resource

win7-20230220-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral32

Sample

LeagueTagsFree-win32-ia32/api-ms-win-core-memory-l1-1-0.dll

Resource

win10v2004-20230220-en

windows10-2004-x64

1 signatures

150 seconds

Report Analysis Logs

General

Target

LeagueTagsFree-win32-ia32/api-ms-win-core-memory-l1-1-0.dll
Size

18KB
MD5

d500d9e24f33933956df0e26f087fd91
SHA1

6c537678ab6cfd6f3ea0dc0f5abefd1c4924f0c0
SHA256

bb33a9e906a5863043753c44f6f8165afe4d5edb7e55efa4c7e6e1ed90778eca
SHA512

c89023eb98bf29adeebfbcb570427b6df301de3d27ff7f4f0a098949f987f7c192e23695888a73f1a2019f1af06f2135f919f6c606a07c8fa9f07c00c64a34b5
SSDEEP

384:+bZWPhWUsnhi00GftpBjwBemQlD16Par7:b4nhoi6BedH

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 1972 wrote to memory of 1692	1972	rundll32.exe	27
PID 1972 wrote to memory of 1692	1972	rundll32.exe	27
PID 1972 wrote to memory of 1692	1972	rundll32.exe	27
PID 1972 wrote to memory of 1692	1972	rundll32.exe	27
PID 1972 wrote to memory of 1692	1972	rundll32.exe	27
PID 1972 wrote to memory of 1692	1972	rundll32.exe	27
PID 1972 wrote to memory of 1692	1972	rundll32.exe	27

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\LeagueTagsFree-win32-ia32\api-ms-win-core-memory-l1-1-0.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:1972
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\LeagueTagsFree-win32-ia32\api-ms-win-core-memory-l1-1-0.dll,#1
  2⤵
  PID:1692

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads