Overview
overview
6Static
static
3828 Setting File.zip
windows11-21h2-x64
1Setting Fi...ry.dll
windows11-21h2-x64
1Setting Fi...ry.pdb
windows11-21h2-x64
3Setting Fi...cation
windows11-21h2-x64
1Setting Fi...rd.exe
windows11-21h2-x64
1Setting Fi...xe.xml
windows11-21h2-x64
1Setting Fi...nifest
windows11-21h2-x64
3Setting Fi...rd.pdb
windows11-21h2-x64
3Setting Fi...re.dll
windows11-21h2-x64
1Setting Fi...��.exe
windows11-21h2-x64
1Setting Fi...��.dll
windows11-21h2-x64
1Setting Fi...og.txt
windows11-21h2-x64
3Setting Fi...��.dll
windows11-21h2-x64
1Setting Fi...��.dll
windows11-21h2-x64
1Setting Fi...er.mp4
windows11-21h2-x64
6Setting Fi...ng.mp4
windows11-21h2-x64
6Setting Fi...+D.mp4
windows11-21h2-x64
6Setting Fi...up.mp4
windows11-21h2-x64
6Setting Fi...ng.mp4
windows11-21h2-x64
6Setting Fi...ng.mp4
windows11-21h2-x64
6Setting Fi...ng.mp4
windows11-21h2-x64
6Setting Fi...eo.mp4
windows11-21h2-x64
6Setting Fi...d.docx
windows11-21h2-x64
1Setting Fi...l.docx
windows11-21h2-x64
Static task
static1
Behavioral task
behavioral1
Sample
828 Setting File.zip
Resource
win11-20231215-en
Behavioral task
behavioral2
Sample
Setting File/Setting File/Ordinary model-mini keyboard English setting software(Compatible with all/HidLibrary.dll
Resource
win11-20231215-en
Behavioral task
behavioral3
Sample
Setting File/Setting File/Ordinary model-mini keyboard English setting software(Compatible with all/HidLibrary.pdb
Resource
win11-20231215-en
Behavioral task
behavioral4
Sample
Setting File/Setting File/Ordinary model-mini keyboard English setting software(Compatible with all�.application
Resource
win11-20231215-en
Behavioral task
behavioral5
Sample
Setting File/Setting File/Ordinary model-mini keyboard English setting software(Compatible with all/MINI KeyBoard.exe
Resource
win11-20231215-en
Behavioral task
behavioral6
Sample
Setting File/Setting File/Ordinary model-mini keyboard English setting software(Compatible with all/MINI KeyBoard.exe.xml
Resource
win11-20231215-en
Behavioral task
behavioral7
Sample
Setting File/Setting File/Ordinary model-mini keyboard English setting software(Compatible with all�.manifest
Resource
win11-20231215-en
Behavioral task
behavioral8
Sample
Setting File/Setting File/Ordinary model-mini keyboard English setting software(Compatible with all/MINI KeyBoard.pdb
Resource
win11-20231215-en
Behavioral task
behavioral9
Sample
Setting File/Setting File/Ordinary model-mini keyboard English setting software(Compatible with all/Theraot.Core.dll
Resource
win11-20231215-en
Behavioral task
behavioral10
Sample
Setting File/Setting File/Ordinary model-mini keyboard English setting software(Compatible with all�.exe
Resource
win11-20231222-en
Behavioral task
behavioral11
Sample
Setting File/Setting File/Ordinary model-mini keyboard English setting software(Compatible with all�.dll
Resource
win11-20231215-en
Behavioral task
behavioral12
Sample
Setting File/Setting File/Ordinary model-mini keyboard English setting software(Compatible with all/errorLog.txt
Resource
win11-20231222-en
Behavioral task
behavioral13
Sample
Setting File/Setting File/Ordinary model-mini keyboard English setting software(Compatible with all�.dll
Resource
win11-20231215-en
Behavioral task
behavioral14
Sample
Setting File/Setting File/Ordinary model-mini keyboard English setting software(Compatible with all�.dll
Resource
win11-20231215-en
Behavioral task
behavioral15
Sample
Setting File/Setting File/Romoral User Manual/Operating Video/Bluetooth layer.mp4
Resource
win11-20231215-en
Behavioral task
behavioral16
Sample
Setting File/Setting File/Romoral User Manual/Operating Video/Ctrl Shift Wheelup Wheeldown Setting.mp4
Resource
win11-20231215-en
Behavioral task
behavioral17
Sample
Setting File/Setting File/Romoral User Manual/Operating Video/Ctrl+C Ctrl+V Win+D.mp4
Resource
win11-20231215-en
Behavioral task
behavioral18
Sample
Setting File/Setting File/Romoral User Manual/Operating Video/Ctrl+Shift+Pageup.mp4
Resource
win11-20231215-en
Behavioral task
behavioral19
Sample
Setting File/Setting File/Romoral User Manual/Operating Video/Knob setting.mp4
Resource
win11-20231222-en
Behavioral task
behavioral20
Sample
Setting File/Setting File/Romoral User Manual/Operating Video/Led Setting.mp4
Resource
win11-20231215-en
Behavioral task
behavioral21
Sample
Setting File/Setting File/Romoral User Manual/Operating Video/Letter A setting.mp4
Resource
win11-20231215-en
Behavioral task
behavioral22
Sample
Setting File/Setting File/Romoral User Manual/Operating Video/Setting Video.mp4
Resource
win11-20231215-en
Behavioral task
behavioral23
Sample
Setting File/Setting File/Romoral User Manual/Q&A For macro keyboard.docx
Resource
win11-20231215-en
Behavioral task
behavioral24
Sample
Setting File/Setting File/Romoral User Manual/User Manual.docx
Resource
win11-20231222-en
General
-
Target
828 Setting File.zip
-
Size
17.5MB
-
MD5
03eaac4b65912f46ce5406913282c8ca
-
SHA1
8d554612b4401d05f83a6d7d67738a5a3662c303
-
SHA256
2a198f370ff2d9c2afbec879a0dc84d1d60f59077178c67bff6a5f4b4210be8f
-
SHA512
3c586bdcf95f3ccbcb1778e5b3fd73368b66acdc0f43a37d0aacf2f0e897b20f72fd0e0e5a3e2522ddee093ab30ab97039e2f7008083bd5120887d027883522e
-
SSDEEP
393216:/n05zUD37IIZDlxGbBE45xeSOXzYs3CD9qAMvHzjTcgvfjDGTzS0/70:EIDLIIZDlxSJSXXzYsyD9cvHgaLDsnj0
Malware Config
Signatures
-
Unsigned PE 7 IoCs
Checks for missing Authenticode signature.
resource unpack001/Setting File/Setting File/Ordinary model-mini keyboard English setting software(Compatible with all/HidLibrary.dll unpack001/Setting File/Setting File/Ordinary model-mini keyboard English setting software(Compatible with all/MINI KeyBoard.exe unpack001/Setting File/Setting File/Ordinary model-mini keyboard English setting software(Compatible with all/Theraot.Core.dll unpack001/Setting File/Setting File/Ordinary model-mini keyboard English setting software(Compatible with all/app.publish/MINI KeyBoard.exe unpack001/Setting File/Setting File/Ordinary model-mini keyboard English setting software(Compatible with all/en-US/MINI KeyBoard.resources.dll unpack001/Setting File/Setting File/Ordinary model-mini keyboard English setting software(Compatible with all/zh-CN/MINI KeyBoard.resources.dll unpack001/Setting File/Setting File/Ordinary model-mini keyboard English setting software(Compatible with all/zh-Hans/MINI KeyBoard.resources.dll
Files
-
828 Setting File.zip.zip
-
Setting File/Setting File/Ordinary model-mini keyboard English setting software(Compatible with all/HidLibrary.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Setting File/Setting File/Ordinary model-mini keyboard English setting software(Compatible with all/HidLibrary.pdb
-
Setting File/Setting File/Ordinary model-mini keyboard English setting software(Compatible with all/MINI KeyBoard.application
-
Setting File/Setting File/Ordinary model-mini keyboard English setting software(Compatible with all/MINI KeyBoard.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 179KB - Virtual size: 178KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 67KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Setting File/Setting File/Ordinary model-mini keyboard English setting software(Compatible with all/MINI KeyBoard.exe.config.xml
-
Setting File/Setting File/Ordinary model-mini keyboard English setting software(Compatible with all/MINI KeyBoard.exe.manifest
-
Setting File/Setting File/Ordinary model-mini keyboard English setting software(Compatible with all/MINI KeyBoard.pdb
-
Setting File/Setting File/Ordinary model-mini keyboard English setting software(Compatible with all/Theraot.Core.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 767KB - Virtual size: 767KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 888B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Setting File/Setting File/Ordinary model-mini keyboard English setting software(Compatible with all/app.publish/MINI KeyBoard.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 179KB - Virtual size: 178KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 67KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Setting File/Setting File/Ordinary model-mini keyboard English setting software(Compatible with all/en-US/MINI KeyBoard.resources.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 888B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Setting File/Setting File/Ordinary model-mini keyboard English setting software(Compatible with all/errorLog.txt
-
Setting File/Setting File/Ordinary model-mini keyboard English setting software(Compatible with all/zh-CN/MINI KeyBoard.resources.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 888B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Setting File/Setting File/Ordinary model-mini keyboard English setting software(Compatible with all/zh-Hans/MINI KeyBoard.resources.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 888B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Setting File/Setting File/Romoral User Manual/Operating Video/Bluetooth layer.mp4
-
Setting File/Setting File/Romoral User Manual/Operating Video/Ctrl Shift Wheelup Wheeldown Setting.mp4
-
Setting File/Setting File/Romoral User Manual/Operating Video/Ctrl+C Ctrl+V Win+D.mp4
-
Setting File/Setting File/Romoral User Manual/Operating Video/Ctrl+Shift+Pageup.mp4
-
Setting File/Setting File/Romoral User Manual/Operating Video/Knob setting.mp4
-
Setting File/Setting File/Romoral User Manual/Operating Video/Led Setting.mp4
-
Setting File/Setting File/Romoral User Manual/Operating Video/Letter A setting.mp4
-
Setting File/Setting File/Romoral User Manual/Operating Video/Setting Video.mp4
-
Setting File/Setting File/Romoral User Manual/Q&A For macro keyboard.docx.docx office2007
-
Setting File/Setting File/Romoral User Manual/User Manual.docx.docx office2007