0f87fe2577ecff0b8b24158c8bebd88bd37c338c6f48111c1c284017e6cc58da

Sharing

Copy URL

Twitter E-mail

General

Target

AJAZZ_AK33 RGB_Keyboard Driver.rar
Size

6.1MB
Sample

231229-w11e2sdab7
MD5

8c163c22750f1555e94e4587c87d4782
SHA1

2cd0f5f239e354714c1a3f7281eb664808319621
SHA256

0f87fe2577ecff0b8b24158c8bebd88bd37c338c6f48111c1c284017e6cc58da
SHA512

1fbf6a5b6f9bb63e193bc15a758099578b0efcc3c58ae616d1ac6a7d41b2c9b9c6beb574bbec3d2a31b7101415949ca517c13ac4a2245d2c6c4b04b78ef15914
SSDEEP

98304:lWAh57+/Wmgo0gUa3b/KDiB3tTM8Waebu0wd+4c07nEhRi5kU7thKTsGkX+0Nhn:3q/BgolUariD6hdWJXwd+AEeth9X+0Hn

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  AJAZZ_AK33 RGB_Keyboard Driver.rar
- Size
  
  6.1MB
- MD5
  
  8c163c22750f1555e94e4587c87d4782
- SHA1
  
  2cd0f5f239e354714c1a3f7281eb664808319621
- SHA256
  
  0f87fe2577ecff0b8b24158c8bebd88bd37c338c6f48111c1c284017e6cc58da
- SHA512
  
  1fbf6a5b6f9bb63e193bc15a758099578b0efcc3c58ae616d1ac6a7d41b2c9b9c6beb574bbec3d2a31b7101415949ca517c13ac4a2245d2c6c4b04b78ef15914
- SSDEEP
  
  98304:lWAh57+/Wmgo0gUa3b/KDiB3tTM8Waebu0wd+4c07nEhRi5kU7thKTsGkX+0Nhn:3q/BgolUariD6hdWJXwd+AEeth9X+0Hn
Score

7^/10

discovery persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2
- Target
  
  黑爵AK33-RGB机械键盘驱动/AJAZZ AK33 RGB Keyboard Driver.exe
- Size
  
  6.5MB
- MD5
  
  0cffc5cdb0503f675397d9bb43a16796
- SHA1
  
  c58da3ab488b0933b9e9b48d7d0123784aae79dd
- SHA256
  
  3172631549717c2569edc2315526092f7f4df1d07e76ae8949a80f54997bd139
- SHA512
  
  58d7434b956de33ee4092985f0139f360bf2f8117139d663e19c5fca30eb1ea59f7f2af01d8b1c5af44e659675da0eb5bd06940dd7062ea08458eae40519d8a9
- SSDEEP
  
  98304:3fCw1bZsnbpKIZc0Ertrr13Q2ty6OcYju6KWnQs0iWf8b1JLUQsZJk1kL1TRC:3fhsbxEZHt06YjbKWQspTEikL1TR
Score

1^/10
behavioral3 behavioral4
- Target
  
  黑爵AK33-RGB机械键盘驱动/AK33 RGB键盘宏设置教程.jpg
- Size
  
  492KB
- MD5
  
  16913a8da8b7f42c4d59fb3dd140c94d
- SHA1
  
  2049fe51733d8cc43d1f2a2218ce241768a1b1ee
- SHA256
  
  77d6a7b27998bb2794e81f83c31607b9478bf00a2dd77e2497d6a26096bcca47
- SHA512
  
  154b9bf602bad690482b807114769ab7851a0a53bce0ea75c8967ede9e91e2c07e49d0b3b73038c9073230105fc36ad76ce1682a31c67e422a860a181c1e8c40
- SSDEEP
  
  12288:q9qr3HXcViYJbT6+KELTo1yJGIv5t/SShf:wkcViUbOET3NSof
Score

3^/10
behavioral5 behavioral6
- Target
  
  黑爵AK33-RGB机械键盘驱动/任何驱动问题，可扫此二维码咨询解决.jpg
- Size
  
  122KB
- MD5
  
  a61fa81e7c789c43eb52d0df2fc20641
- SHA1
  
  918a266c2eae9d7c064ea92c734bf8fe03a6e7f9
- SHA256
  
  a95fca4e156cbafc877ca5269c8578fd06594c7a4c01bf83cfc8cf9274e091f9
- SHA512
  
  3ed35a74c90335b183517033bfc26dcf54153ddfcf5b1b078db419b13ccfef721fe90c58abd4625057c35bf4045235ac6f0dc9622075559addafefb6e6bdefcb
- SSDEEP
  
  1536:JkykKql9B5FZBR2+J/gXPzCXtcbEGKr4vXmg9ImOyNqXosGugRRd:Jn29LH2+OPzCXtcbEPEX9dCGRd
Score

3^/10
behavioral7 behavioral8

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Checks computer location settings

Executes dropped EXE

Loads dropped DLL

Adds Run key to start application

Checks installed software on the system

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8