df62774220320cf94ff8fd8ab302710b825f0ed3d2e7d5dc4c406d85d877c37b

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20240215-en
resource tags

arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
submitted
26-05-2024 21:33

Target

leagueoflengends.exe
Size

8.1MB
MD5

3c7e128b83f0834e6bd3de2dd87cc574
SHA1

e24293bb09899843c6382e12f6bb65318ce196ad
SHA256

df62774220320cf94ff8fd8ab302710b825f0ed3d2e7d5dc4c406d85d877c37b
SHA512

4686d25437cf22ef1bcbe21b86c30364bd2fc208111413544f26be84cfa6966977e425feb6e028208cc890a3c3de750b3abc8ec465a786fb155da1a1f1e0f752
SSDEEP

196608:ynMruQXeIX69onJ5hrZEReyiU8AdZYJERD48RmU/ITvN8wZlsPvZPrTd7Y:rrrnK9c5hlERuAdZYydtNITfZWZrh7Y

Score

7^/10

Loads dropped DLL 1 IoCs

Processes:

leagueoflengends.exe

pid process

2252 leagueoflengends.exe

pid	process
2252	leagueoflengends.exe

Suspicious use of WriteProcessMemory 3 IoCs

Processes:

leagueoflengends.exe

description	pid	process	target process
PID 2256 wrote to memory of 2252	2256	leagueoflengends.exe	leagueoflengends.exe
PID 2256 wrote to memory of 2252	2256	leagueoflengends.exe	leagueoflengends.exe
PID 2256 wrote to memory of 2252	2256	leagueoflengends.exe	leagueoflengends.exe

C:\Users\Admin\AppData\Local\Temp\leagueoflengends.exe
"C:\Users\Admin\AppData\Local\Temp\leagueoflengends.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2256

C:\Users\Admin\AppData\Local\Temp\leagueoflengends.exe
"C:\Users\Admin\AppData\Local\Temp\leagueoflengends.exe"
2⤵
- Loads dropped DLL
PID:2252

C:\Users\Admin\AppData\Local\Temp\_MEI22562\python39.dll
Filesize
4.3MB

MD5
11c051f93c922d6b6b4829772f27a5be

SHA1
42fbdf3403a4bc3d46d348ca37a9f835e073d440

SHA256
0eabf135bb9492e561bbbc5602a933623c9e461aceaf6eb1ceced635e363cd5c

SHA512
1cdec23486cffcb91098a8b2c3f1262d6703946acf52aa2fe701964fb228d1411d9b6683bd54527860e10affc0e3d3de92a6ecf2c6c8465e9c8b9a7304e2a4a6

Download Submit