Analysis
- user interaction
yes - max time kernel
899s - max time network
461s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-ja - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-jalocale:ja-jpos:windows11-ltsc_2024-x64systemwindows - submitted
27/08/2026, 00:05
Behavioral task
behavioral1
Sample
MOGU client.zip
Resource
win11ltsc2024-20260709-ja
0 signatures
900 seconds
Behavioral task
behavioral2
Sample
MOGU client/anani.exe
Resource
win11ltsc2024-20260709-ja
2 signatures
900 seconds
Behavioral task
behavioral3
Sample
anani.pyc
Resource
win11ltsc2024-20260709-ja
4 signatures
900 seconds
General
- Target MOGU client.zip
- Size 10.7MB
- Sample260827-adfapsxgre
- SHA256 94a8a8360f6849c78beb43dd033e501175980c4a1a1154e61c3bc0961f97fe71
- MD5 e43c75757c40a2c47be1d7a9372072f6
- SHA1 5cf3058ea4f475ed5501325cf1e0df753caf85a7
- SHA512 6f8c37adddd79f656916e1cd40596d45dad396da0c5bae59f1932f58f85df87e9e10a1b63d0edcdec42bbb8ca01c91b76bbe0478d63cedc64e00d87c2c22a27b
- SSDEEP 196608:leXl7UT89dycLsKQVtuZDIXEEVtZFqqZLORku7Sht/BWGXrdk:kXNUUdetiUnbNZLORku7wXWWk
- TLSH T1F5B6334E40911DA2DD4CE9DA3BE7CB4866D8DA025922ED7C3503533C2FEF224459AAFD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
Processes
-
C:\Windows\Explorer.exeC:\Windows\Explorer.exe /idlist,,"C:\Users\Admin\AppData\Local\Temp\MOGU client.zip"1⤵PID:3584
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k GPSvcGroup1⤵PID:2696
-
C:\Windows\System32\SecurityHealthHost.exe\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding1⤵PID:5472