Analysis
- user interaction
yes - max time kernel
300s - max time network
203s - platform
windows10-2004_x64 - resource
win10v2004-20260130-en - resource tags
arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
08/05/2026, 03:43
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
AnimeGen/character.exe
Resource
win10v2004-20260130-en
2 signatures
300 seconds
Behavioral task
behavioral2
Sample
AnimeGen/character.exe
Resource
win11-20260130-en
1 signatures
300 seconds
Behavioral task
behavioral3
Sample
AnimeGen/charaex.dll
Resource
win10v2004-20250619-en
3 signatures
300 seconds
Behavioral task
behavioral4
Sample
AnimeGen/charaex.dll
Resource
win11-20260130-en
3 signatures
300 seconds
Behavioral task
behavioral5
Sample
AnimeGen/imgctl.dll
Resource
win10v2004-20260130-en
2 signatures
300 seconds
Behavioral task
behavioral6
Sample
AnimeGen/imgctl.dll
Resource
win11-20260130-en
2 signatures
300 seconds
General
- Target AnimeGen/character.exe
- Size 199KB
- Sample260508-d92qcscy41
- SHA256 82a78fc2f9d508a91cbf5bfb840b2184598f47d06bacfe0e76edc8355178027c
- MD5 7d19e005a53a293717429af9ab6c8602
- SHA1 0c49d13917e32a9e9dbdfbbebf9aa6060f549228
- SHA512 7c9f383d654122fc39a4319fb0faf24fb3a6e8e1a573f6955a3acfd2b1a07a727a1720491376a4c78c5e29d0501b9b20f59fe0c09693d9625759af32bd12d7db
- SSDEEP 3072:wS4gTyBnnSSlrmz48honRv3ohgpxlUy7AM7YpWD0n+l/sA3D9D/3rCAyVxv3w:wVrlrmz3honRv3o09x7Yatn3D9D/bCI
- TLSH T11B148E2AFAA3A0B3CCC7617078A65B3DBA2DB534171772FB47091F1694111C68A361BF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language character.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 4512 character.exe
Processes
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\AnimeGen\config.ini
- Size 127B
- SHA256 af38b79780f956e228d01afc55e68183cfcb21a029edc3b099b3866edfe0e7d1
- MD5 8be97bc5e7c95792a4221471488e72a3
- SHA1 2adda5a55696f455ca2d10ada0f87f1831b64628
- SHA512 bdd709957c93859e0d658468ff5a3d586d766fc80b1b0b4a06c9271a2d30e09168aa80f3b8681401070079f6655525ce7ce1e4677c6d5a5c898ab1eca3726ef5
- TLSH T11EB02B3617C0812741C23308AC5181409174C8050E45700CD403082E6001088163C002
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\AnimeGen\profile\default.dat
- Size 336B
- SHA256 5f0bf78f92a732fe9048b73234c7fd72aa8f93fdc5c1d350376898e732ac2d36
- MD5 58900c69cb5120139200a410d9d16b6a
- SHA1 8ffa127fc2513d873f00434ec4a9488bc98b6bf8
- SHA512 cd1a95d290d89dff75d2e869a9415fa96bf2028f6b794331dc6cc92c00b91358f8be77b81e7fe7b6481544a159e747bb07fa5ee638d4016d34aff3eed1dba907
- TLSH T149E0269E28A80660EB82A2702432822891F6FE3BC303D551E97340900FC80B5ED499C4
- MD5 SHA1 SHA512 TLSH