Analysis
- max time kernel
151s - max time network
150s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
- submitted
30/10/2026, 12:49
General
- Target false_realitier/FalseRealitiers.exe
- Size 80.2MB
- Sample261030-p2fcyact5t
- SHA256 3704990acd39d295419cf23d64f69be55628022a3a1e442065ffd05594a1e358
Malware Config
Signatures
- Modifies registry class 1 IoCs
- Suspicious use of FindShellTrayWindow 1 IoCs
- Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\false_realitier\FalseRealitiers.exe"C:\Users\Admin\AppData\Local\Temp\false_realitier\FalseRealitiers.exe"1⤵
- Modifies registry class
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3848-27-0x00007FF6061E0000-0x00007FF60B3E8000-memory.dmp
memory/3848-28-0x00007FF6061E0000-0x00007FF60B3E8000-memory.dmp
memory/3848-29-0x00007FF6061E0000-0x00007FF60B3E8000-memory.dmp
memory/3848-30-0x00007FF6061E0000-0x00007FF60B3E8000-memory.dmp
memory/3848-31-0x00007FF6061E0000-0x00007FF60B3E8000-memory.dmp
memory/3848-32-0x00007FF6061E0000-0x00007FF60B3E8000-memory.dmp
memory/3848-33-0x00007FF6061E0000-0x00007FF60B3E8000-memory.dmp
memory/3848-34-0x00007FF6061E0000-0x00007FF60B3E8000-memory.dmp
memory/3848-35-0x00007FF6061E0000-0x00007FF60B3E8000-memory.dmp
memory/3848-36-0x00007FF6061E0000-0x00007FF60B3E8000-memory.dmp
memory/3848-37-0x00007FF6061E0000-0x00007FF60B3E8000-memory.dmp
memory/3848-38-0x00007FF6061E0000-0x00007FF60B3E8000-memory.dmp
memory/3848-39-0x00007FF6061E0000-0x00007FF60B3E8000-memory.dmp
memory/3848-40-0x00007FF6061E0000-0x00007FF60B3E8000-memory.dmp