Overview

overview

3

Static

static

NohBoard-R....0.zip

windows7-x64

1

NohBoard-R....0.zip

windows10-2004-x64

1

NohBoard.Hooking.dll

windows7-x64

1

NohBoard.Hooking.dll

windows10-2004-x64

3

NohBoard.exe

windows7-x64

1

NohBoard.exe

windows10-2004-x64

1

System.ValueTuple.dll

windows7-x64

1

System.ValueTuple.dll

windows10-2004-x64

1

clipper_library.dll

windows7-x64

1

clipper_library.dll

windows10-2004-x64

1

keyboards/...d.json

windows7-x64

3

keyboards/...d.json

windows10-2004-x64

3

keyboards/...d.json

windows7-x64

3

keyboards/...d.json

windows10-2004-x64

3

keyboards/...d.json

windows7-x64

3

keyboards/...d.json

windows10-2004-x64

3

keyboards/...d.json

windows7-x64

3

keyboards/...d.json

windows10-2004-x64

3

keyboards/...d.json

windows7-x64

3

keyboards/...d.json

windows10-2004-x64

3

keyboards/...d.json

windows7-x64

3

keyboards/...d.json

windows10-2004-x64

3

keyboards/...d.json

windows7-x64

3

keyboards/...d.json

windows10-2004-x64

3

keyboards/...d.json

windows7-x64

3

keyboards/...d.json

windows10-2004-x64

3

keyboards/...d.json

windows7-x64

3

keyboards/...d.json

windows10-2004-x64

3

keyboards/...d.json

windows7-x64

3

keyboards/...d.json

windows10-2004-x64

3

keyboards/...d.json

windows7-x64

3

keyboards/...d.json

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NohBoard-ReWrite-v1.3.0.zip

  • Size

    1.2MB

  • Sample

    220911-a5dwyseefj

  • MD5

    42151bf03b30423f7cc5abb9ddd3e79e

  • SHA1

    219ae38db2292c9a5ff3e97eb255f7f87df770a3

  • SHA256

    d868ada36466e3f88d3edb023d333fac503fa48f282c27dae6148d044a65b59d

  • SHA512

    311f294716d5660fdc48c0be0236a9e629b5074a2d090a4f402f249e1294f3b6bd7994ffb589ad67a44eef04c9d0a32ef5cd496c645f32c56ecbbb3e5b4fa11a

  • SSDEEP

    24576:e+05kaxHwZRLPdOd+tChM5uaBMybnwxW8r2LOBv0rVxHwfhvCL+7z2wJAC7C60a:e+KziCe5uaVUxWdiBv050tCIz2wJOFa

Score
3/10

Malware Config

Targets

    • Target

      NohBoard-ReWrite-v1.3.0.zip

    • Size

      1.2MB

    • MD5

      42151bf03b30423f7cc5abb9ddd3e79e

    • SHA1

      219ae38db2292c9a5ff3e97eb255f7f87df770a3

    • SHA256

      d868ada36466e3f88d3edb023d333fac503fa48f282c27dae6148d044a65b59d

    • SHA512

      311f294716d5660fdc48c0be0236a9e629b5074a2d090a4f402f249e1294f3b6bd7994ffb589ad67a44eef04c9d0a32ef5cd496c645f32c56ecbbb3e5b4fa11a

    • SSDEEP

      24576:e+05kaxHwZRLPdOd+tChM5uaBMybnwxW8r2LOBv0rVxHwfhvCL+7z2wJAC7C60a:e+KziCe5uaVUxWdiBv050tCIz2wJOFa

    Score
    1/10
    behavioral1behavioral2

    • Target

      NohBoard.Hooking.dll

    • Size

      22KB

    • MD5

      3c46fbc3a3b3c05b38c678e7efd8be43

    • SHA1

      f57fe43638d88a398f7bebc3d4b47933f9497609

    • SHA256

      8b40054bc6f69d98cac97fd4b6d823bf732dbed9609bf6624b78f70b0335d3f7

    • SHA512

      451abac0d7bd101d58c8b90f1baac61ca73046c9d65494f0fad770214751ce12ed8d4f10d64aecf8a49489cdaaf3d46b964d42d085c0e7c4468edf323700e2cb

    • SSDEEP

      384:OyvLJ9gHBJwHKBu8Q/CfLT/xxB1V1L4QudwOVvrGGTchEtCE8M899vMjnOhZ7GD9:BIoaT1H6xvroeMhZ7GD36h/d6fXSYAOd

    Score
    3/10
    behavioral3behavioral4

    • Target

      NohBoard.exe

    • Size

      834KB

    • MD5

      b7b5bf53f5394400acdc6f3c04130227

    • SHA1

      606be1bfdc944732e2f31f555180e7adc86db301

    • SHA256

      8df2babaa8c93c6012f7474a019854c1ac6cdada88a4a4e9c5a8c6e593efe70d

    • SHA512

      9d1d8cbf4c7af84b70b45d071d049fb01a9fbaf21f2b3d7915e90dc8097f03933d89c1fb5a5595894efb1345a9993dd4b413df605de887ee3a80c2c4cc488472

    • SSDEEP

      6144:3bUk4w/ECvdaOrjUbqDXsIv1YAydSSq+xp+OJYuelZFel6:rUG/EC7HUbdI90o9j

    Score
    1/10
    behavioral5behavioral6

    • Target

      System.ValueTuple.dll

    • Size

      77KB

    • MD5

      99cec77dbee0ab10b9fc4d52a1d414be

    • SHA1

      c83d024e80c36b663458d478dfdb067336e2d616

    • SHA256

      d6fb0dcfee1490a8168117ed1b55758f11db38475417b3668d19f89dcb55cbdd

    • SHA512

      988b0ff9ede87fe7538b2e0cdd684962965b4fc2a4f0fc92726248f249cacb7c5674f3978d2d7cbed68991c71e0b0339d6edda57384097a4da8efd7d77b43cd9

    • SSDEEP

      1536:h784YWac+abptsy5VyYc/9n1RcGxzeeUVn9KyQgHo0JuresehaA1VUF:h7N1r9KGI04CCAP

    Score
    1/10
    behavioral7behavioral8

    • Target

      clipper_library.dll

    • Size

      51KB

    • MD5

      c0832c0f4f0dea7e8657e08f16f92542

    • SHA1

      77b51e7f69bd9ac8c4f656bb5e3b783bf8f10b11

    • SHA256

      cd7134bbf05521ae15ff75902a4550496bdd5cf4ac7af5998cb3b9c4ac7db3b5

    • SHA512

      e3b6acaec1e6eda71a4d56a42f8e65515c57c02d33c5d026b3e79a9710c6b823f20f374e88f10b37fa08cf9e77cff1e0fb1c7c6f13bf1cfa4864d304098b27c4

    • SSDEEP

      1536:6trcX5fbz5uukWsKh3ZEWlwkUyRLtir49d:6t4X5fbz5uBbs3ZzwkUott9d

    Score
    1/10
    behavioral9behavioral10

    • Target

      keyboards/BurningFish/steelseries6gv2/keyboard.json

    • Size

      50KB

    • MD5

      a9d4e81a0c73c250c996d152b4928112

    • SHA1

      b779d1954ff4efcd9fbf605267330d71ca5113f5

    • SHA256

      c67d50a2124e6e9bba9c8f8a406cefd47f8fded77c2828053b7913756e7e46f0

    • SHA512

      b59037d8909fbd36205d1937838e8b37f464624e60e72b9d4033c6ecd755fc738925c8193e273f278d86a300216e327d900d1714f4f329a7af3528db2f56cbbe

    • SSDEEP

      384:9n57lDc+pwZpIG939GQYg7iGRii6gCni2O3gfHA+7vKOD:95kYg7iGRii6gCdOwfj7N

    Score
    3/10
    behavioral11behavioral12

    • Target

      keyboards/BurningFish/steelseries6gv2mouse/keyboard.json

    • Size

      52KB

    • MD5

      490c62457c8777ac7df83a8a9eb56416

    • SHA1

      70cd100e62f92c05ab13bf28af92e8e2de182849

    • SHA256

      83745f68af96ef26da8b47179653e2c5b02efd5727890692868611d73e81999c

    • SHA512

      e4412df2f6857a506951360a24a1ba256e3e9c3c0ae29ddc02cd3b258c55c21a9f48c92a3a0f87104535e3e1f3beb063706841711023d0bf02138e49e77d5f2b

    • SSDEEP

      384:9n57lDc+pwZpIG939GQYg7iGRii6gCni2O3gfHA+7vKjiED:95kYg7iGRii6gCdOwfj7Iim

    Score
    3/10
    behavioral13behavioral14

    • Target

      keyboards/BurningFish/steelseries6gv2mousemove/keyboard.json

    • Size

      52KB

    • MD5

      ed12b67374c11ec20bf9f59300c81860

    • SHA1

      273964e743fd8fea68600da76b114b26ca51cc3a

    • SHA256

      98db9348d9058d58fdee67a08c8b51fb9f7307a06b068b253ce622dcb33f633e

    • SHA512

      75a2e013ffc755245ebe9a515236158732278ca230b3c65250f78bf1aa36a1dba8544b4204244370acdd0cb85b1fcb03886d5689f849f57515345167377836e5

    • SSDEEP

      384:9n57lDc+pwZpIG939GQYg7iGRii6gCni2O3gfHA+7vKji8D:95kYg7iGRii6gCdOwfj7Iie

    Score
    3/10
    behavioral15behavioral16

    • Target

      keyboards/BurningFish/us_intlmouse/keyboard.json

    • Size

      52KB

    • MD5

      f220f5ee4765786712aeedd7e6350295

    • SHA1

      61eab17c48b6beae975f7ff845305e294b3197a1

    • SHA256

      3f0b66bb0bf79b79c68139add9d7fb97ec609a563f2308080c2ed3b72b617cb9

    • SHA512

      9dc6e51b03e0911821252e0c3b3cf4a0569a2009dcb58d88f1c1db74a179984e4f9cb146a3f26fadcce20c8c31183111de0beeeaa29faf890a96f31b716a380e

    • SSDEEP

      384:9nN7lDc+pwZpIG939GQYg7rGRii6gCni2O3gfvA+7vKyiED:9NkYg7rGRii6gCdOwHj7rim

    Score
    3/10
    behavioral17behavioral18

    • Target

      keyboards/BurningFish/us_intlmousemove/keyboard.json

    • Size

      52KB

    • MD5

      571ed4a18f55346ce8fcdf13c3c03bdc

    • SHA1

      6b05486b2d4107a180a8716066d22d7d5092cffb

    • SHA256

      96a816370ad3b41006de36acdb3880af26abf675841cf130e784c7fc8704d12d

    • SHA512

      9184e8869b5f6a286348c298a93983355badefd30a3ad356f9e9a0880ce02fd6055bca983bdb9917b23be5fd214dbd45a5929abab7d165b0cf1aa1225b912540

    • SSDEEP

      384:9nN7lDc+pwZpIG939GQYg7rGRii6gCni2O3gfvA+7vKyi8D:9NkYg7rGRii6gCdOwHj7rie

    Score
    3/10
    behavioral19behavioral20

    • Target

      keyboards/GamesLegacy/arrows/keyboard.json

    • Size

      1KB

    • MD5

      650803203001dc5f4a3fbb9caf7ee4b7

    • SHA1

      7a6ff747c6df2caf21967427b8e900019e0a1404

    • SHA256

      035330da97a589544780ae689308688dce427370cc730acbbe3df858dbda0f0f

    • SHA512

      d2f40bc5f6db35eeac494d7383e63ec2eb2a9317fbf8a4f9329055562cf64d6de19b83ee4ef5b348530c00052981858c30be064ae217aa2c94ab13464fdf82f5

    Score
    3/10
    behavioral21behavioral22

    • Target

      keyboards/GamesLegacy/arrows_numpad/keyboard.json

    • Size

      10KB

    • MD5

      13b166e2f8cf8169824f17e842c1bad9

    • SHA1

      8d5a62003a013466d32f794a07509e3fbae2c080

    • SHA256

      4f6d1f8d9e825607f77938d243890729422556a9e42a2a8aec9c579dd639315f

    • SHA512

      904599b424d706898abfebddcee8a27e5e81ced1e91d2b0c7fb0f65dd38918d49df93a20e51d84ec872bf52f4f6c24a15d27d75d8e935053c30d263aa6ef2baf

    • SSDEEP

      192:9GAsLbrsiO9BBDgZbNHyQdGuLJAjTTHmr7AFlKdPEYzrS5ZGnLhoikwox:9wbYVx

    Score
    3/10
    behavioral23behavioral24

    • Target

      keyboards/GamesLegacy/azerty_fps/keyboard.json

    • Size

      14KB

    • MD5

      a5b853fa85f486083a63bdbcee9840bc

    • SHA1

      d2002bee1b93d000dcb38b3af830e0c3608c9abd

    • SHA256

      ec02936df6a27dfd7ffe7d290a842fdaf567d14d54f4c5c1fbf06e67955f2591

    • SHA512

      c1910f3e465d6b8c6595d4c6d4139544af7ec470d6bb71c4f53b59291529d91cad0daf558bc5bbed85e3701ca4739f45d08974facc1c4720fe74d209fc56dbe1

    • SSDEEP

      192:9GisD2kqMhRQgYvgE6Z8sHV/pqC+NIoXNOgJ5MWhDEUPIINyYTkhOiytMgnzRSyN:9O21H98w

    Score
    3/10
    behavioral25behavioral26

    • Target

      keyboards/GamesLegacy/azerty_sc2/keyboard.json

    • Size

      14KB

    • MD5

      e7d7023c7da42d64ea518374bfd9a36a

    • SHA1

      ff07fd4dedc84a2a239ff91817a936ae868d7acb

    • SHA256

      6e3dcda4f9fdb22e726040996e3ef3dd1cdd074563854550cfa7b34e4e6767d0

    • SHA512

      88957f78581862ad00e68a41349d0bcfaa6fed97c84c72265f724c6dde24ea1fde966d03fa640b4b44dd2f0c54e59cf0303c9552120d00a88d851a4dfc5234ff

    • SSDEEP

      192:9GvgZZLXSAt8sxpX8/TqiD/jLBAEWCx1sUpni6vXeZYLYT9tiam2B546HxLoud1u:9PZtdPLW

    Score
    3/10
    behavioral27behavioral28

    • Target

      keyboards/GamesLegacy/game_dota/keyboard.json

    • Size

      8KB

    • MD5

      bbb5a827c68fc2b931f2b77ec27b2c75

    • SHA1

      5cf405b71dba87f9489587e99015b35af39b81bc

    • SHA256

      0126ebb9f9ea01705bbefe60ff2de423bc7d431d6f3a07b4f581bbcef715a859

    • SHA512

      8d921404267bbea1c1245d008eae9e3144d5e86ebafea28a7370f5c347f222f54f19aad7794686f10c8896daf8784b5ab128c7dc889cec960d187b3aeb79f7b9

    • SSDEEP

      192:9G8d8gZhMPRdgfBimIv3g2RdylROsCDvOGX0EJV8wtu:9Au

    Score
    3/10
    behavioral29behavioral30

    • Target

      keyboards/GamesLegacy/game_esa/keyboard.json

    • Size

      6KB

    • MD5

      a28cbab8c15b3bb7d1e603540dde50c3

    • SHA1

      480a0e06cd9d287d301a37179d6d3c0ede9050bf

    • SHA256

      8b2fb076b9237cd537fae84877c30bdd4fd50aa3d66e3017b7d231856b81931d

    • SHA512

      8794a22e1154bccfbe971ee363a447ae293a311c2ba2533d8922af510912fb08aca8cb4ffcb83110349802c7221dcdf724f8291dc175d2503aa767b4f71cace7

    • SSDEEP

      96:UXwcC4e4DxYx9CWeMR0HYSu9ko71+g/g70/i3mPm9:UXwJ4rVI9CFQ04j9kYJrFE

    Score
    3/10
    behavioral31behavioral32

MITRE ATT&CK Enterprise v6

Tasks