702d244206781486a1deae7221c518c36d30d1089f39e79fdb3e637265e64eb1

Analysis

max time kernel
122s
max time network
123s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
26-05-2024 20:50

Target

leagueoflengends.exe
Size

7.9MB
MD5

41a2fe810d3abd3689776d2faf4f3619
SHA1

726bf8d3dd34c61efa5caae82ceebc65256516f7
SHA256

702d244206781486a1deae7221c518c36d30d1089f39e79fdb3e637265e64eb1
SHA512

2c0116f27a3a6b376d3b7fa90d1bef35ac396e194893a9240c4bc47ab17be359e763b5360368fcfc0a5756436380fc55146f5d989a54716809b07435283b9f7e
SSDEEP

196608:KnHruzeIX69onJ5hrZEReyiU8AdZYJERS48RmU/ITvN8wZlsPvZPrTcY:MrMK9c5hlERuAdZYygtNITfZWZr4Y

Score

7^/10

Loads dropped DLL 1 IoCs

Processes:

leagueoflengends.exe

pid process

764 leagueoflengends.exe

pid	process
764	leagueoflengends.exe

Suspicious use of WriteProcessMemory 3 IoCs

Processes:

leagueoflengends.exe

description	pid	process	target process
PID 2244 wrote to memory of 764	2244	leagueoflengends.exe	leagueoflengends.exe
PID 2244 wrote to memory of 764	2244	leagueoflengends.exe	leagueoflengends.exe
PID 2244 wrote to memory of 764	2244	leagueoflengends.exe	leagueoflengends.exe

C:\Users\Admin\AppData\Local\Temp\leagueoflengends.exe
"C:\Users\Admin\AppData\Local\Temp\leagueoflengends.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2244

C:\Users\Admin\AppData\Local\Temp\leagueoflengends.exe
"C:\Users\Admin\AppData\Local\Temp\leagueoflengends.exe"
2⤵
- Loads dropped DLL
PID:764

C:\Users\Admin\AppData\Local\Temp\_MEI22442\python39.dll
Filesize
4.3MB

MD5
11c051f93c922d6b6b4829772f27a5be

SHA1
42fbdf3403a4bc3d46d348ca37a9f835e073d440

SHA256
0eabf135bb9492e561bbbc5602a933623c9e461aceaf6eb1ceced635e363cd5c

SHA512
1cdec23486cffcb91098a8b2c3f1262d6703946acf52aa2fe701964fb228d1411d9b6683bd54527860e10affc0e3d3de92a6ecf2c6c8465e9c8b9a7304e2a4a6

Download Submit