Analysis

  • user interaction
    yes
  • max time kernel
    300s
  • max time network
    203s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260130-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    08/05/2026, 03:43

General

  • Target
    AnimeGen/character.exe
  • Size 199KB
  • Sample260508-d92qcscy41
  • SHA256 82a78fc2f9d508a91cbf5bfb840b2184598f47d06bacfe0e76edc8355178027c
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious use of FindShellTrayWindow 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\AnimeGen\character.exe
    "C:\Users\Admin\AppData\Local\Temp\AnimeGen\character.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of FindShellTrayWindow
    PID:4512

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        config.ini

        • Path C:\Users\Admin\AppData\Local\Temp\AnimeGen\config.ini
        • Size 127B
        • SHA256 af38b79780f956e228d01afc55e68183cfcb21a029edc3b099b3866edfe0e7d1
        • MD5 SHA1 SHA512 TLSH

        default.dat

        • Path C:\Users\Admin\AppData\Local\Temp\AnimeGen\profile\default.dat
        • Size 336B
        • SHA256 5f0bf78f92a732fe9048b73234c7fd72aa8f93fdc5c1d350376898e732ac2d36
        • MD5 SHA1 SHA512 TLSH

        memory/4512-1-0x0000000002220000-0x0000000002286000-memory.dmp

        memory/4512-2-0x00000000021C0000-0x000000000221F000-memory.dmp

        memory/4512-31-0x00000000021C0000-0x000000000221F000-memory.dmp