Analysis
- user interaction
yes - max time kernel
75s - max time network
75s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
16/07/2026, 18:02
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
REALLIVE.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
REALLIVE.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
General
- Target REALLIVE.exe
- Size 2.3MB
- Sample260716-wmss2set91
- SHA256 e0c1b5524347a71d0b60e147f2d4b81fd335b0c16dc618ed03adc506f6888011
- MD5 d551c0b94d6d346fd63be785b4d75e1c
- SHA1 c138f238830910021bc904d9fb8e6ef7bde5abc9
- SHA512 6882ecc71b5ef4b1967da386dad1bd6ce1089997a387db60d8c6eaa4b9f1530dcb3f4404c74251d4d3ea38101278aa182da62b7731180be6c99aef13bd859ea5
- SSDEEP 24576:9wgoElqEkW4feNOWpdmrItysvC7iZe+XvzhzH5rf0Mf8V6tUkRS1QopGZVgEbLMF:HpkW4fuOsU+rWV6tUwS1QFjFo9
- TLSH T166B57C14D691E0BFD5FA203AC2DD67E6D934383847A764D3B79019F2ECAC8F22835952
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language REALLIVE.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\REALLIVE.exe"C:\Users\Admin\AppData\Local\Temp\REALLIVE.exe"1⤵
- System Location Discovery: System Language Discovery
PID:3084
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:1464