Analysis
- user interaction
yes - max time kernel
58s - max time network
64s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
19/09/2026, 17:22
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
LostArkExplorer-win-x64-v1.1.1.exe
Resource
win10v2004-20260911-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
LostArkExplorer-win-x64-v1.1.1.exe
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
General
- Target LostArkExplorer-win-x64-v1.1.1.exe
- Size 94.8MB
- Sample260919-vxsqcsvxcw
- SHA256 9287a01a0bf9d38de629a0a31a6e25b641b6f14314c9d5ee7ebd54db6666f06b
- MD5 1fb614bbbd2a05c3ff977d88aaaf2882
- SHA1 fd5921605bb827bfe876b1cf4b8ff4dc420bd8b0
- SHA512 a25ea7a9118233c2be8561430f0207e312c5f5b90fc893ecf503cc02a3733e691ce56a20a9f25bae3366a4aa82374a859cd7daffca090009dfd649234f4644fd
- SSDEEP 786432:id2lROX892vY1FUV5OtsFntaRugH7wMWYlia:G2lRG8MvYUFJKkMW2ia
- TLSH T14B28BF11B3E80A19D56FC27CC2638112E7B1B8831761D7CF1598EA692F63BD06F36366
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Loads dropped DLL 3 IoCs
pid Process 2260 LostArkExplorer-win-x64-v1.1.1.exe 2260 LostArkExplorer-win-x64-v1.1.1.exe 2260 LostArkExplorer-win-x64-v1.1.1.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2260 LostArkExplorer-win-x64-v1.1.1.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\LostArkExplorer-win-x64-v1.1.1.exe"C:\Users\Admin\AppData\Local\Temp\LostArkExplorer-win-x64-v1.1.1.exe"1⤵
- Loads dropped DLL
- Suspicious use of FindShellTrayWindow
PID:2260
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:3900
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\.net\LostArkExplorer-win-x64-v1.1.1\pxcTph_NV5a57_jmE2fEUuqld3HvjQA=\av_libglesv2.dll
- Size 5.2MB
- SHA256 9b203e40323b49dad29546a52b8b67d200bba8ff4cab9709a79cede23ba847d4
- MD5 11a4a07f31e4a91fff678c019b7736af
- SHA1 9912e11aa9c351be136474e0d0975e7964b1e124
- SHA512 4197cd706c7abb4782f05ba73177a018299365060c6368305b030f21733f3209545bc7d8f61968c79b24088ced4acc4eda92044821fb8347c3370bc6925a4bf1
- SSDEEP 49152:FJ2uagzq2YgAoS2tNydAOlzwn56aCqQ2iUAqC2rCnsZ1LT/Tq2XEoxEf6m8s47eF:9PTjAurCnsZ5T/lXEonmn56AL
- TLSH T104467C03F39690DEC409D2B9874B8622F776B88507257ADF229497242F77FD06B3A724
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\LostArkExplorer-win-x64-v1.1.1\pxcTph_NV5a57_jmE2fEUuqld3HvjQA=\libHarfBuzzSharp.dll
- Size 1.7MB
- SHA256 eb76238c9e8e41d44b5a5b18167c4c5b39ca5db4277af5dbe92d730f0fc14a7d
- MD5 e0c86bbd88d6b8f5643c1ab1c050a4ee
- SHA1 f6c72b1fd89d0f9e3d7825a0450ae0c0af092c5a
- SHA512 023a1054d7516ebb99b46ca3f9a17b1ee00e55a46356586513fdd45c42bd6ccca16139a8e93e7a9bc533afa5abed121cb5fd40474bfb27bca22da3598ebef694
- SSDEEP 49152:MG+tDvarn9O+3KVv/s0upzEpOqw8k25Pj4LneMdTaGVW:FS2be5Pp
- TLSH T1E3859E4AF2AA10E9D9BFC074C666950BE7A274050314DFEF65E08A95EF23EF5167E300
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\LostArkExplorer-win-x64-v1.1.1\pxcTph_NV5a57_jmE2fEUuqld3HvjQA=\libSkiaSharp.dll
- Size 9.0MB
- SHA256 9a0d95e8caaa852c70d085af6a40a744242172ad9ea3fd6bc7599875a8a1dbcd
- MD5 ef1fabce43fe32ca83260481253f5476
- SHA1 ad988af9826e5aacc7b8e5ed6d220b229d70060e
- SHA512 f73b56742e43b169177ff49f639c50f98a417f91175c70f7348bde1c7570c2838c181a59b628b003eb2618d75da920a449a724cccaec1dae8b9a80d5aac386f6
- SSDEEP 98304:4GKXmtfLM9j2KAdTzwlrdyc8HgGTngmY6+o/:cXmlLMvGsIaGjb
- TLSH T19B964A03B66B64ACC04AC474834B99665E2038CB0B35BCEF52C5A1393FB9BF46F79615
- MD5 SHA1 SHA512 SSDEEP TLSH