Analysis

  • user interaction
    yes
  • max time kernel
    58s
  • max time network
    64s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260911-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    19/09/2026, 17:22

General

  • Target
    LostArkExplorer-win-x64-v1.1.1.exe
  • Size 94.8MB
  • Sample260919-vxsqcsvxcw
  • SHA256 9287a01a0bf9d38de629a0a31a6e25b641b6f14314c9d5ee7ebd54db6666f06b
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 3 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\LostArkExplorer-win-x64-v1.1.1.exe
    "C:\Users\Admin\AppData\Local\Temp\LostArkExplorer-win-x64-v1.1.1.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of FindShellTrayWindow
    PID:2260
  • C:\Windows\System32\rundll32.exe
    C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
    1⤵
      PID:3900

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          av_libglesv2.dll

          • Path C:\Users\Admin\AppData\Local\Temp\.net\LostArkExplorer-win-x64-v1.1.1\pxcTph_NV5a57_jmE2fEUuqld3HvjQA=\av_libglesv2.dll
          • Size 5.2MB
          • SHA256 9b203e40323b49dad29546a52b8b67d200bba8ff4cab9709a79cede23ba847d4
          • MD5 SHA1 SHA512 SSDEEP TLSH

          libHarfBuzzSharp.dll

          • Path C:\Users\Admin\AppData\Local\Temp\.net\LostArkExplorer-win-x64-v1.1.1\pxcTph_NV5a57_jmE2fEUuqld3HvjQA=\libHarfBuzzSharp.dll
          • Size 1.7MB
          • SHA256 eb76238c9e8e41d44b5a5b18167c4c5b39ca5db4277af5dbe92d730f0fc14a7d
          • MD5 SHA1 SHA512 SSDEEP TLSH

          libSkiaSharp.dll

          • Path C:\Users\Admin\AppData\Local\Temp\.net\LostArkExplorer-win-x64-v1.1.1\pxcTph_NV5a57_jmE2fEUuqld3HvjQA=\libSkiaSharp.dll
          • Size 9.0MB
          • SHA256 9a0d95e8caaa852c70d085af6a40a744242172ad9ea3fd6bc7599875a8a1dbcd
          • MD5 SHA1 SHA512 SSDEEP TLSH