Analysis
- max time kernel
149s - max time network
127s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
- submitted
30/10/2026, 12:49
General
- Target false_realitier/FalseRealitiers.console.exe
- Size 181KB
- Sample261030-p2fcyact5t
- SHA256 5b30574f2012c511b1004d84bbb43d5c85eed44510282a056bda6527a676211f
Malware Config
Signatures
- Modifies registry class 1 IoCs
- Suspicious use of FindShellTrayWindow 1 IoCs
- Suspicious use of SetWindowsHookEx 3 IoCs
- Suspicious use of WriteProcessMemory 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\false_realitier\FalseRealitiers.console.exe"C:\Users\Admin\AppData\Local\Temp\false_realitier\FalseRealitiers.console.exe"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\false_realitier\FalseRealitiers.exeC:\Users\Admin\AppData\Local\Temp\false_realitier\FalseRealitiers.exe2⤵
- Modifies registry class
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4864-38-0x00007FF6E3800000-0x00007FF6E8A08000-memory.dmp
memory/4864-46-0x00007FF6E3800000-0x00007FF6E8A08000-memory.dmp
memory/4864-30-0x00007FF6E3800000-0x00007FF6E8A08000-memory.dmp
memory/4864-32-0x00007FF6E3800000-0x00007FF6E8A08000-memory.dmp
memory/4864-34-0x00007FF6E3800000-0x00007FF6E8A08000-memory.dmp
memory/4864-36-0x00007FF6E3800000-0x00007FF6E8A08000-memory.dmp
memory/4864-28-0x00007FF6E3800000-0x00007FF6E8A08000-memory.dmp
memory/4864-42-0x00007FF6E3800000-0x00007FF6E8A08000-memory.dmp
memory/4864-54-0x00007FF6E3800000-0x00007FF6E8A08000-memory.dmp
memory/4864-44-0x00007FF6E3800000-0x00007FF6E8A08000-memory.dmp
memory/4864-40-0x00007FF6E3800000-0x00007FF6E8A08000-memory.dmp
memory/4864-48-0x00007FF6E3800000-0x00007FF6E8A08000-memory.dmp
memory/4864-50-0x00007FF6E3800000-0x00007FF6E8A08000-memory.dmp
memory/4864-52-0x00007FF6E3800000-0x00007FF6E8A08000-memory.dmp
memory/5016-27-0x00007FF6DDB40000-0x00007FF6DDB76000-memory.dmp