Overview
overview
3Static
static
NohBoard-R....0.zip
windows7-x64
1NohBoard-R....0.zip
windows10-2004-x64
1NohBoard.Hooking.dll
windows7-x64
1NohBoard.Hooking.dll
windows10-2004-x64
3NohBoard.exe
windows7-x64
1NohBoard.exe
windows10-2004-x64
1System.ValueTuple.dll
windows7-x64
1System.ValueTuple.dll
windows10-2004-x64
1clipper_library.dll
windows7-x64
1clipper_library.dll
windows10-2004-x64
1keyboards/...d.json
windows7-x64
3keyboards/...d.json
windows10-2004-x64
3keyboards/...d.json
windows7-x64
3keyboards/...d.json
windows10-2004-x64
3keyboards/...d.json
windows7-x64
3keyboards/...d.json
windows10-2004-x64
3keyboards/...d.json
windows7-x64
3keyboards/...d.json
windows10-2004-x64
3keyboards/...d.json
windows7-x64
3keyboards/...d.json
windows10-2004-x64
3keyboards/...d.json
windows7-x64
3keyboards/...d.json
windows10-2004-x64
3keyboards/...d.json
windows7-x64
3keyboards/...d.json
windows10-2004-x64
3keyboards/...d.json
windows7-x64
3keyboards/...d.json
windows10-2004-x64
3keyboards/...d.json
windows7-x64
3keyboards/...d.json
windows10-2004-x64
3keyboards/...d.json
windows7-x64
3keyboards/...d.json
windows10-2004-x64
3keyboards/...d.json
windows7-x64
3keyboards/...d.json
windows10-2004-x64
3Analysis
-
max time kernel
41s -
max time network
45s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
11/09/2022, 00:47
Static task
static1
Behavioral task
behavioral1
Sample
NohBoard-ReWrite-v1.3.0.zip
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
NohBoard-ReWrite-v1.3.0.zip
Resource
win10v2004-20220901-en
Behavioral task
behavioral3
Sample
NohBoard.Hooking.dll
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
NohBoard.Hooking.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral5
Sample
NohBoard.exe
Resource
win7-20220812-en
Behavioral task
behavioral6
Sample
NohBoard.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral7
Sample
System.ValueTuple.dll
Resource
win7-20220901-en
Behavioral task
behavioral8
Sample
System.ValueTuple.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral9
Sample
clipper_library.dll
Resource
win7-20220812-en
Behavioral task
behavioral10
Sample
clipper_library.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral11
Sample
keyboards/BurningFish/steelseries6gv2/keyboard.json
Resource
win7-20220901-en
Behavioral task
behavioral12
Sample
keyboards/BurningFish/steelseries6gv2/keyboard.json
Resource
win10v2004-20220812-en
Behavioral task
behavioral13
Sample
keyboards/BurningFish/steelseries6gv2mouse/keyboard.json
Resource
win7-20220812-en
Behavioral task
behavioral14
Sample
keyboards/BurningFish/steelseries6gv2mouse/keyboard.json
Resource
win10v2004-20220812-en
Behavioral task
behavioral15
Sample
keyboards/BurningFish/steelseries6gv2mousemove/keyboard.json
Resource
win7-20220901-en
Behavioral task
behavioral16
Sample
keyboards/BurningFish/steelseries6gv2mousemove/keyboard.json
Resource
win10v2004-20220812-en
Behavioral task
behavioral17
Sample
keyboards/BurningFish/us_intlmouse/keyboard.json
Resource
win7-20220812-en
Behavioral task
behavioral18
Sample
keyboards/BurningFish/us_intlmouse/keyboard.json
Resource
win10v2004-20220901-en
Behavioral task
behavioral19
Sample
keyboards/BurningFish/us_intlmousemove/keyboard.json
Resource
win7-20220812-en
Behavioral task
behavioral20
Sample
keyboards/BurningFish/us_intlmousemove/keyboard.json
Resource
win10v2004-20220812-en
Behavioral task
behavioral21
Sample
keyboards/GamesLegacy/arrows/keyboard.json
Resource
win7-20220812-en
Behavioral task
behavioral22
Sample
keyboards/GamesLegacy/arrows/keyboard.json
Resource
win10v2004-20220901-en
Behavioral task
behavioral23
Sample
keyboards/GamesLegacy/arrows_numpad/keyboard.json
Resource
win7-20220812-en
Behavioral task
behavioral24
Sample
keyboards/GamesLegacy/arrows_numpad/keyboard.json
Resource
win10v2004-20220812-en
Behavioral task
behavioral25
Sample
keyboards/GamesLegacy/azerty_fps/keyboard.json
Resource
win7-20220812-en
Behavioral task
behavioral26
Sample
keyboards/GamesLegacy/azerty_fps/keyboard.json
Resource
win10v2004-20220901-en
Behavioral task
behavioral27
Sample
keyboards/GamesLegacy/azerty_sc2/keyboard.json
Resource
win7-20220812-en
Behavioral task
behavioral28
Sample
keyboards/GamesLegacy/azerty_sc2/keyboard.json
Resource
win10v2004-20220812-en
Behavioral task
behavioral29
Sample
keyboards/GamesLegacy/game_dota/keyboard.json
Resource
win7-20220901-en
Behavioral task
behavioral30
Sample
keyboards/GamesLegacy/game_dota/keyboard.json
Resource
win10v2004-20220812-en
Behavioral task
behavioral31
Sample
keyboards/GamesLegacy/game_esa/keyboard.json
Resource
win7-20220812-en
Behavioral task
behavioral32
Sample
keyboards/GamesLegacy/game_esa/keyboard.json
Resource
win10v2004-20220812-en
General
-
Target
NohBoard.exe
-
Size
834KB
-
MD5
b7b5bf53f5394400acdc6f3c04130227
-
SHA1
606be1bfdc944732e2f31f555180e7adc86db301
-
SHA256
8df2babaa8c93c6012f7474a019854c1ac6cdada88a4a4e9c5a8c6e593efe70d
-
SHA512
9d1d8cbf4c7af84b70b45d071d049fb01a9fbaf21f2b3d7915e90dc8097f03933d89c1fb5a5595894efb1345a9993dd4b413df605de887ee3a80c2c4cc488472
-
SSDEEP
6144:3bUk4w/ECvdaOrjUbqDXsIv1YAydSSq+xp+OJYuelZFel6:rUG/EC7HUbdI90o9j
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 1920 NohBoard.exe