General
- Target LeaguePatchCollection.exe
- Size 3.5MB
- Sample261015-qk2ehsbs2r
- SHA256 b2bee85f391ac5e7d4dac8f3dcf9d085d93329bb2fc69910693fd23eb3061c6a
- MD5 19165c4357adbe8985c222150bc6c0e4
- SHA1 ef01372052401f0d20de752b892d834f7ecc091c
- SHA512 33f14f4b3bd7f7b608c3901b75d4c6fbffe8724cd80087dc70c00e1ac2cc87cca01b66b5ea8ea28f42854440b63597b78582c2fe74cbcae079372a3d3716f0c3
- SSDEEP 49152:4+A+NOpXm1mnj0cP+DkhMAiawnFAeBBty07i:4d+QgUwW
- TLSH T16EF52A143A949727D2BF9F3295E60011D7F1E4536AB2EB0E25D3A7EC18427857C823AF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
LeaguePatchCollection.exe
Resource
win10v2004-20260911-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
LeaguePatchCollection.exe
Resource
win11ltsc2024-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target LeaguePatchCollection.exe
- Size 3.5MB
- SHA256 b2bee85f391ac5e7d4dac8f3dcf9d085d93329bb2fc69910693fd23eb3061c6a
- MD5 19165c4357adbe8985c222150bc6c0e4
- SHA1 ef01372052401f0d20de752b892d834f7ecc091c
- SHA512 33f14f4b3bd7f7b608c3901b75d4c6fbffe8724cd80087dc70c00e1ac2cc87cca01b66b5ea8ea28f42854440b63597b78582c2fe74cbcae079372a3d3716f0c3
- SSDEEP 49152:4+A+NOpXm1mnj0cP+DkhMAiawnFAeBBty07i:4d+QgUwW
- TLSH T16EF52A143A949727D2BF9F3295E60011D7F1E4536AB2EB0E25D3A7EC18427857C823AF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.