Overview

overview

7

Static

static

L2NPC/HFExt.dll

windows7-x64

1

L2NPC/HFExt.dll

windows10-2004-x64

1

L2NPC/L2NPC.exe

windows7-x64

3

L2NPC/L2NPC.exe

windows10-2004-x64

3

L2Server/GGauth70.dll

windows7-x64

3

L2Server/GGauth70.dll

windows10-2004-x64

3

L2Server/HFExt.dll

windows7-x64

1

L2Server/HFExt.dll

windows10-2004-x64

1

L2Server/L2Server.exe

windows7-x64

3

L2Server/L2Server.exe

windows10-2004-x64

7

L2Server/Loader.exe

windows7-x64

3

L2Server/Loader.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    25s
  • max time network
    43s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    31-10-2022 05:03

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    L2Server/HFExt.dll

  • Size

    1.1MB

  • MD5

    771a913655b7cf44986878a2310642c3

  • SHA1

    29cfb5009cfb7020d9037999b56cc7a976183af5

  • SHA256

    b21aad37dce35c48b2774f0de2ed19e48f1cb1146c3ba553778d208a19178815

  • SHA512

    071fdfad4c5f371f4366c6f8834c901ddc3ff5b898d10702063183ee767c71b2d616741e1bc161c42240126b785798dc4b2081088f33e95ccaf31286ed781c22

  • SSDEEP

    24576:gDV22RQmpUoTJ++KBSlWndFT+PmmRpjDo98gk6NjBdwFSStQwla/Mwmq1/VQvlwl:gDV22RQJoTJ++/lyT+PmmRpnkNjBdwFq

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\L2Server\HFExt.dll,#1
    1⤵
      PID:1160

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads