1265a106b8ecdd3f4fcdea7d1b54eed44cc2247b0cf2902608453aef4db17784

Analysis

max time kernel
149s
max time network
149s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
02/06/2026, 00:21

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
$APPDATA/Livecare/service/LivecareServiceLivelet.exe
Size 2.0MB
Sample260602-anvs5sa18n
SHA256 1265a106b8ecdd3f4fcdea7d1b54eed44cc2247b0cf2902608453aef4db17784
MD5 f6d25f4a7eb03953a27ada424e59e101
SHA1 bd054dd63705d2e44458073987dc2f44b99cafa1
SHA512 b1d69f8dc3974c328b4d2fbcd77bff2a96919dfdc873cfdb27ab131fdd480ab85b3f472a4543854ec457371696da0de8d9ecfac2c451ce9b321ebd648d8ee59a
SSDEEP 49152:YkBnQ82rF3+xbSWCbylRDSTUb2SLaALqG6z1W7uJO2:v1Q82rGSWhDSTUb2PGW1W7uJ
TLSH
T1C3A57C22BDE14A77C1230F31AA4DF23935BDB5300B39819763D45F1839746A39629EBB
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	LivecareServiceLivelet.exe

C:\Users\Admin\AppData\Local\Temp\$APPDATA\Livecare\service\LivecareServiceLivelet.exe
"C:\Users\Admin\AppData\Local\Temp\$APPDATA\Livecare\service\LivecareServiceLivelet.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:3640

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

LivecareServiceLivelet.log

Path C:\Users\Admin\AppData\Local\Temp\$APPDATA\Livecare\service\LivecareServiceLivelet.log
Size 610B
SHA256 06e802eb83083334b22636f84ee568628ea7571dbe1c3f79e34f4ad64b087a1f
MD5 de1828f3922cd07f601c63385cf5cc85
SHA1 efe0016ef169ecc64c92e387d5b7bff1fec5b6e9
SHA512 6fe6f4209c67192c8f9f480321ecded16d326121eee9f93691de3219c7075ffcc977416d3549cfe577f8f2f63ea50534ff5b12f1190434c6f089a6375a0ade4a
TLSH
T12FF0447954CF35F2683D74852A5F7F1008FB2A98623C6DD91BD8056820C9EDD562D13A
MD5 SHA1 SHA512 TLSH

Submit Download