Analysis
-
max time kernel
107s -
max time network
140s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
-
submitted
03/04/2023, 04:26
General
-
Target
LeagueTagsFree-win32-ia32/api-ms-win-core-console-l1-1-0.dll
-
Size
18KB
-
MD5
502263c56f931df8440d7fd2fa7b7c00
-
SHA1
523a3d7c3f4491e67fc710575d8e23314db2c1a2
-
SHA256
94a5df1227818edbfd0d5091c6a48f86b4117c38550343f780c604eee1cd6231
-
SHA512
633efab26cded9c3a5e144b81cbbd3b6adf265134c37d88cfd5f49bb18c345b2fc3a08ba4bbc917b6f64013e275239026829ba08962e94115e94204a47b80221
-
SSDEEP
192:3jBMWIghWGZiKedXe123Ouo+Uggs/nGfe4pBjS/uBmWh0txKdmVWQ4GWDZoiyqnP:GWPhWVXYi00GftpBjSemTltcwpS
Score
1/10
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\LeagueTagsFree-win32-ia32\api-ms-win-core-console-l1-1-0.dll,#11⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\LeagueTagsFree-win32-ia32\api-ms-win-core-console-l1-1-0.dll,#12⤵
-