7b096df063f2d0fe9f057d5cd6f0a6c2c0d15d62019e832804eb13f64e811026

Analysis

max time kernel
120s
max time network
127s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
26-05-2024 21:43

Target

leagueoflengends.exe
Size

8.1MB
MD5

29bd5e5b0dc84520ba09d4283d849861
SHA1

33b809d4e115ad98e5b904ee99d8869bacc96433
SHA256

7b096df063f2d0fe9f057d5cd6f0a6c2c0d15d62019e832804eb13f64e811026
SHA512

f193ec0f7afa263419509c3e6ac573ad6ea303f80cd2516d0328acb1e2d5d2f4ab73eb2bac1ff63c5063e4c1d2413da5ace69c600226e388806feefe2fafa1af
SSDEEP

196608:cn7ruOXeIX69onJ5hrZEReyiU8AdZYJERD48RmU/ITvN8wZlsPvZPrTd7Y:qrZnK9c5hlERuAdZYydtNITfZWZrh7Y

Score

7^/10

Loads dropped DLL 1 IoCs

Processes:

leagueoflengends.exe

pid process

2740 leagueoflengends.exe

pid	process
2740	leagueoflengends.exe

Suspicious use of WriteProcessMemory 3 IoCs

Processes:

leagueoflengends.exe

description	pid	process	target process
PID 856 wrote to memory of 2740	856	leagueoflengends.exe	leagueoflengends.exe
PID 856 wrote to memory of 2740	856	leagueoflengends.exe	leagueoflengends.exe
PID 856 wrote to memory of 2740	856	leagueoflengends.exe	leagueoflengends.exe

C:\Users\Admin\AppData\Local\Temp\leagueoflengends.exe
"C:\Users\Admin\AppData\Local\Temp\leagueoflengends.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:856

C:\Users\Admin\AppData\Local\Temp\leagueoflengends.exe
"C:\Users\Admin\AppData\Local\Temp\leagueoflengends.exe"
2⤵
- Loads dropped DLL
PID:2740

C:\Users\Admin\AppData\Local\Temp\_MEI8562\python39.dll
Filesize
4.3MB

MD5
11c051f93c922d6b6b4829772f27a5be

SHA1
42fbdf3403a4bc3d46d348ca37a9f835e073d440

SHA256
0eabf135bb9492e561bbbc5602a933623c9e461aceaf6eb1ceced635e363cd5c

SHA512
1cdec23486cffcb91098a8b2c3f1262d6703946acf52aa2fe701964fb228d1411d9b6683bd54527860e10affc0e3d3de92a6ecf2c6c8465e9c8b9a7304e2a4a6

Download Submit