General

  • Target

    K86_Keyboard_Software.exe

  • Size

    72.3MB

  • MD5

    d7ae545aa23f935f31e59ca044ad4cd9

  • SHA1

    9993b4d310ff9c800533aa90d82e83e2d1bcd69e

  • SHA256

    c7bf13723a1b88f4df8491e0911ca944efc1eea567dec5a248f1106dcc893c80

  • SHA512

    94782909d571ce21557a98bc33ba50832660dd5416ed659e628f92b5880fb179788684721a740df93bc0302ab190f829d845dd39b83f9cbfcbda7826aa9cecdd

  • SSDEEP

    1572864:fPrkJoOPIhrESvuPHi8YI3yky1uCBE759TLEJKE2LWxUg:fzOAv0C8YIik6uL19XEgE2Ls/

Score
3/10

Malware Config

Signatures

  • Unsigned PE 18 IoCs

    Checks for missing Authenticode signature.

Files

  • K86_Keyboard_Software.exe
    .exe windows:4 windows x86 arch:x86

    b34f154ec913d2d2c435cbd644e91687


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/SpiderBanner.dll
    .dll windows:5 windows x86 arch:x86

    90179d905cdca282880541c826651c15


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/StdUtils.dll
    .dll windows:5 windows x86 arch:x86

    7b79709c0d5576549eb261e3410f95f8


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/WinShell.dll
    .dll windows:4 windows x86 arch:x86

    a75c904bad153f5af2c37cfdf66eba5c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/app-32.7z
    .7z
  • Attack Shark Driver.exe
    .exe windows:5 windows x86 arch:x86

    dfd6625dacd779da8119c60db22165c1


    Headers

    Imports

    Exports

    Sections

  • LICENSE.electron.txt
  • LICENSES.chromium.html
  • chrome_100_percent.pak
  • chrome_200_percent.pak
  • d3dcompiler_47.dll
    .dll windows:10 windows x86 arch:x86

    185ce3a45c3a9cfb3bf83afd7f79c140


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ffmpeg.dll
    .dll windows:5 windows x86 arch:x86

    c7497313062f9c96c83518b36f70731f


    Headers

    Imports

    Exports

    Sections

  • icudtl.dat
  • libEGL.dll
    .dll windows:5 windows x86 arch:x86

    14cd5ffd5d2a5e20eb8ffa21377b813a


    Headers

    Imports

    Exports

    Sections

  • libGLESv2.dll
    .dll windows:5 windows x86 arch:x86

    b30b9c8cc35fba1b1d1b357c770d7174


    Headers

    Imports

    Exports

    Sections

  • locales/af.pak
  • locales/am.pak
  • locales/ar.pak
  • locales/bg.pak
  • locales/bn.pak
  • locales/ca.pak
  • locales/cs.pak
  • locales/da.pak
  • locales/de.pak
  • locales/el.pak
  • locales/en-GB.pak
  • locales/en-US.pak
  • locales/es-419.pak
  • locales/es.pak
  • locales/et.pak
  • locales/fa.pak
  • locales/fi.pak
  • locales/fil.pak
  • locales/fr.pak
  • locales/gu.pak
  • locales/he.pak
  • locales/hi.pak
    .ps1
  • locales/hr.pak
  • locales/hu.pak
  • locales/id.pak
  • locales/it.pak
  • locales/ja.pak
  • locales/kn.pak
  • locales/ko.pak
  • locales/lt.pak
  • locales/lv.pak
    .ps1
  • locales/ml.pak
  • locales/mr.pak
  • locales/ms.pak
  • locales/nb.pak
  • locales/nl.pak
  • locales/pl.pak
  • locales/pt-BR.pak
  • locales/pt-PT.pak
  • locales/ro.pak
  • locales/ru.pak
  • locales/sk.pak
  • locales/sl.pak
  • locales/sr.pak
  • locales/sv.pak
  • locales/sw.pak
  • locales/ta.pak
  • locales/te.pak
  • locales/th.pak
  • locales/tr.pak
  • locales/uk.pak
  • locales/ur.pak
  • locales/vi.pak
  • locales/zh-CN.pak
  • locales/zh-TW.pak
  • resources.pak
  • resources/app.asar
  • resources/app.asar.unpacked/company/company_AttackShark/APP.png
    .png
  • resources/app.asar.unpacked/company/company_AttackShark/CONFIG.json
  • resources/app.asar.unpacked/company/company_AttackShark/default_logo.png
    .png
  • resources/app.asar.unpacked/company/company_AttackShark/dev/yc500_k75rgb_dm.png
    .png
  • resources/app.asar.unpacked/company/company_AttackShark/dev/yc500_k75rgb_soc.png
    .png
  • resources/app.asar.unpacked/company/company_AttackShark/dev/yc500_sg8967_soc.png
    .png
  • resources/app.asar.unpacked/company/company_AttackShark/icon.png
    .png
  • resources/app.asar.unpacked/company/company_AttackShark/login_logo.png
    .png
  • resources/app.asar.unpacked/company/company_AttackShark/topnav_logo.png
    .png
  • resources/app.asar.unpacked/dist/113.js
    .js
  • resources/app.asar.unpacked/dist/images/active_04066f67b28d12da26aa.png
    .png
  • resources/app.asar.unpacked/dist/images/active_0d76e7a3b7bb99799f4a.png
    .png
  • resources/app.asar.unpacked/dist/images/active_0ddb9b6014f7f90ca4df.png
    .png
  • resources/app.asar.unpacked/dist/images/active_1840e4e1e86d2254e136.png
    .png
  • resources/app.asar.unpacked/dist/images/active_1b89d425222df99430fc.png
    .png
  • resources/app.asar.unpacked/dist/images/active_2149f4384a092f83ffb7.png
    .png
  • resources/app.asar.unpacked/dist/images/active_27532fd96bb77b9b6525.png
    .png
  • resources/app.asar.unpacked/dist/images/active_276a96ed55d2a32fff58.png
    .png
  • resources/app.asar.unpacked/dist/images/active_39c9ebc3ffa853a39d21.png
    .png
  • resources/app.asar.unpacked/dist/images/active_4d106c867c5bd5f777ac.png
    .png
  • resources/app.asar.unpacked/dist/images/active_4ec4f3ccf3263c162db0.png
    .png
  • resources/app.asar.unpacked/dist/images/active_52f7908d340ce96ef2ad.png
    .png
  • resources/app.asar.unpacked/dist/images/active_5ca0938b902b090f8bf5.png
    .png
  • resources/app.asar.unpacked/dist/images/active_69c673807e69914742ac.png
    .png
  • resources/app.asar.unpacked/dist/images/active_6dc96b8e2d27f09808c2.png
    .png
  • resources/app.asar.unpacked/dist/images/active_73322f3b7ee936069de8.png
    .png
  • resources/app.asar.unpacked/dist/images/active_89c0c129e0ab00296903.png
    .png
  • resources/app.asar.unpacked/dist/images/active_8b596030f31c6a5ba82c.png
    .png
  • resources/app.asar.unpacked/dist/images/active_c7556d55efaf4c376e15.png
    .png
  • resources/app.asar.unpacked/dist/images/active_c8d57f8f499be11a5b6f.png
    .png
  • resources/app.asar.unpacked/dist/images/active_cbddd52e6beb2de9b06a.png
    .png
  • resources/app.asar.unpacked/dist/images/active_ce05b3d99296ce051d5e.png
    .png
  • resources/app.asar.unpacked/dist/images/active_cf2d89dd2b82f747720b.png
    .png
  • resources/app.asar.unpacked/dist/images/active_dc9c1911dbf43f816fd3.png
    .png
  • resources/app.asar.unpacked/dist/images/active_dd10ae4fdbf11cb36939.png
    .png
  • resources/app.asar.unpacked/dist/images/active_de1f6e13fcecbd98f153.png
    .png
  • resources/app.asar.unpacked/dist/images/active_df440488368f3caee9a5.png
    .png
  • resources/app.asar.unpacked/dist/images/active_e484d79575ce1399979c.png
    .png
  • resources/app.asar.unpacked/dist/images/active_e68401a328109da11372.png
    .png
  • resources/app.asar.unpacked/dist/images/active_e7b54b722088cb597fe8.png
    .png
  • resources/app.asar.unpacked/dist/images/active_f389d646889a15ba699c.png
    .png
  • resources/app.asar.unpacked/dist/images/active_fbb1cb1ee4b3608523b1.png
    .png
  • resources/app.asar.unpacked/dist/images/battery_0_f474b586e962465e7f96.png
    .png
  • resources/app.asar.unpacked/dist/images/battery_100_1e29e87a7a72210695dc.png
    .png
  • resources/app.asar.unpacked/dist/images/battery_20_8e31e1944762cb627e13.png
    .png
  • resources/app.asar.unpacked/dist/images/battery_40_c55c997a9a9e5a530ce2.png
    .png
  • resources/app.asar.unpacked/dist/images/battery_60_7c53bf583413e9970710.png
    .png
  • resources/app.asar.unpacked/dist/images/battery_80_b3665cacd99dbac7663b.png
    .png
  • resources/app.asar.unpacked/dist/images/com_img_8fd359f6dce9190863db.png
    .png
  • resources/app.asar.unpacked/dist/images/com_share_795c5afa032c0f8f65c7.png
    .png
  • resources/app.asar.unpacked/dist/images/com_text_a1460796ca9430fa09e6.png
    .png
  • resources/app.asar.unpacked/dist/images/computer_1e00a8d08ab6bc6538ba.png
    .png
  • resources/app.asar.unpacked/dist/images/folder_ff583a2e9b9c66e75926.png
    .png
  • resources/app.asar.unpacked/dist/images/hover_04066f67b28d12da26aa.png
    .png
  • resources/app.asar.unpacked/dist/images/hover_0d76e7a3b7bb99799f4a.png
    .png
  • resources/app.asar.unpacked/dist/images/hover_0ddb9b6014f7f90ca4df.png
    .png
  • resources/app.asar.unpacked/dist/images/hover_1840e4e1e86d2254e136.png
    .png
  • resources/app.asar.unpacked/dist/images/hover_1b89d425222df99430fc.png
    .png
  • resources/app.asar.unpacked/dist/images/hover_2149f4384a092f83ffb7.png
    .png
  • resources/app.asar.unpacked/dist/images/hover_27532fd96bb77b9b6525.png
    .png
  • resources/app.asar.unpacked/dist/images/hover_276a96ed55d2a32fff58.png
    .png
  • resources/app.asar.unpacked/dist/images/hover_39c9ebc3ffa853a39d21.png
    .png
  • resources/app.asar.unpacked/dist/images/hover_4d106c867c5bd5f777ac.png
    .png
  • resources/app.asar.unpacked/dist/images/hover_4ec4f3ccf3263c162db0.png
    .png
  • resources/app.asar.unpacked/dist/images/hover_52f7908d340ce96ef2ad.png
    .png
  • resources/app.asar.unpacked/dist/images/hover_5ca0938b902b090f8bf5.png
    .png
  • resources/app.asar.unpacked/dist/images/hover_69c673807e69914742ac.png
    .png
  • resources/app.asar.unpacked/dist/images/hover_6dc96b8e2d27f09808c2.png
    .png
  • resources/app.asar.unpacked/dist/images/hover_73322f3b7ee936069de8.png
    .png
  • resources/app.asar.unpacked/dist/images/hover_7b892b5d6721daecc71f.png
    .png
  • resources/app.asar.unpacked/dist/images/hover_89c0c129e0ab00296903.png
    .png
  • resources/app.asar.unpacked/dist/images/hover_8b596030f31c6a5ba82c.png
    .png
  • resources/app.asar.unpacked/dist/images/hover_c7556d55efaf4c376e15.png
    .png
  • resources/app.asar.unpacked/dist/images/hover_c8d57f8f499be11a5b6f.png
    .png
  • resources/app.asar.unpacked/dist/images/hover_cbddd52e6beb2de9b06a.png
    .png
  • resources/app.asar.unpacked/dist/images/hover_ce05b3d99296ce051d5e.png
    .png
  • resources/app.asar.unpacked/dist/images/hover_cf2d89dd2b82f747720b.png
    .png
  • resources/app.asar.unpacked/dist/images/hover_dc9c1911dbf43f816fd3.png
    .png
  • resources/app.asar.unpacked/dist/images/hover_dd10ae4fdbf11cb36939.png
    .png
  • resources/app.asar.unpacked/dist/images/hover_de1f6e13fcecbd98f153.png
    .png
  • resources/app.asar.unpacked/dist/images/hover_df440488368f3caee9a5.png
    .png
  • resources/app.asar.unpacked/dist/images/hover_e484d79575ce1399979c.png
    .png
  • resources/app.asar.unpacked/dist/images/hover_e68401a328109da11372.png
    .png
  • resources/app.asar.unpacked/dist/images/hover_e7b54b722088cb597fe8.png
    .png
  • resources/app.asar.unpacked/dist/images/hover_f389d646889a15ba699c.png
    .png
  • resources/app.asar.unpacked/dist/images/hover_fbb1cb1ee4b3608523b1.png
    .png
  • resources/app.asar.unpacked/dist/images/keyboard_icon_f916c66a2411e8d614e8.png
    .png
  • resources/app.asar.unpacked/dist/images/left_arrow_5b7b3bacb2afbe16fb5f.png
    .png
  • resources/app.asar.unpacked/dist/images/loading_4582ca47ef9277e8414c.png
    .png
  • resources/app.asar.unpacked/dist/images/mouse_left_7d63030c0f2fbcf3b260.png
    .png
  • resources/app.asar.unpacked/dist/images/mouse_left_back_f9b80d2c85b4cc42b8b3.png
    .png
  • resources/app.asar.unpacked/dist/images/mouse_left_forward_c5237983daeb5a4842b0.png
    .png
  • resources/app.asar.unpacked/dist/images/mouse_mid_fba87e8c90b2845931a2.png
    .png
  • resources/app.asar.unpacked/dist/images/mouse_right_c473c7bcf4cde214861b.png
    .png
  • resources/app.asar.unpacked/dist/images/none_data_aae1bed09225c7778921.png
    .png
  • resources/app.asar.unpacked/dist/images/normal_029410a8551a1a105a0e.png
    .png
  • resources/app.asar.unpacked/dist/images/normal_02ee4dd444ff54d9bb2b.png
    .png
  • resources/app.asar.unpacked/dist/images/normal_044feb6a3f9cb06838d2.png
    .png
  • resources/app.asar.unpacked/dist/images/normal_12902bc2c537fed562eb.png
    .png
  • resources/app.asar.unpacked/dist/images/normal_18e601694cc88c293e34.png
    .png
  • resources/app.asar.unpacked/dist/images/normal_21e537c3bd003fe7c7e3.png
    .png
  • resources/app.asar.unpacked/dist/images/normal_291919b9b780ed7e59d7.png
    .png
  • resources/app.asar.unpacked/dist/images/normal_38cb8e0b421c4d1bb8a0.png
    .png
  • resources/app.asar.unpacked/dist/images/normal_453651432241ce0d6193.png
    .png
  • resources/app.asar.unpacked/dist/images/normal_4611d0287245d8b92554.png
    .png
  • resources/app.asar.unpacked/dist/images/normal_49e0e196d2eabfe64873.png
    .png
  • resources/app.asar.unpacked/dist/images/normal_4a68c11b653e81893d13.png
    .png
  • resources/app.asar.unpacked/dist/images/normal_4e0685db4572697de3af.png
    .png
  • resources/app.asar.unpacked/dist/images/normal_5c25ef5b13c0f84fc7be.png
    .png
  • resources/app.asar.unpacked/dist/images/normal_5c890e46ec83a13a65e8.png
    .png
  • resources/app.asar.unpacked/dist/images/normal_5e72c02623f14f33c86f.png
    .png
  • resources/app.asar.unpacked/dist/images/normal_70e3cb72efaf16d2cf31.png
    .png
  • resources/app.asar.unpacked/dist/images/normal_771ece483bf99e04ffa3.png
    .png
  • resources/app.asar.unpacked/dist/images/normal_7a66669774745547f7b1.png
    .png
  • resources/app.asar.unpacked/dist/images/normal_8c06c377d1f4d88e13ff.png
    .png
  • resources/app.asar.unpacked/dist/images/normal_8d077bb05344f2cfbf26.png
    .png
  • resources/app.asar.unpacked/dist/images/normal_97a77ad1071ee29892e4.png
    .png
  • resources/app.asar.unpacked/dist/images/normal_9b1481831660f0a98214.png
    .png
  • resources/app.asar.unpacked/dist/images/normal_9ba3555cf6be2acb7ae7.png
    .png
  • resources/app.asar.unpacked/dist/images/normal_a5fdb1121f59b95df7d5.png
    .png
  • resources/app.asar.unpacked/dist/images/normal_ad4d76f398863f4713c2.png
    .png
  • resources/app.asar.unpacked/dist/images/normal_b018b69c8b62bb36398a.png
    .png
  • resources/app.asar.unpacked/dist/images/normal_b26fd54e6d37b3d00c74.png
    .png
  • resources/app.asar.unpacked/dist/images/normal_bf2b227d409faa739a84.png
    .png
  • resources/app.asar.unpacked/dist/images/normal_ca4064ffc3783ac51275.png
    .png
  • resources/app.asar.unpacked/dist/images/normal_d23a2d201f42c30e6642.png
    .png
  • resources/app.asar.unpacked/dist/images/normal_d3b0cdaa5a1676c61866.png
    .png
  • resources/app.asar.unpacked/dist/images/normal_e04b90d076f45430544e.png
    .png
  • resources/app.asar.unpacked/dist/images/normal_e0675a9c2a6f4ea3c175.png
    .png
  • resources/app.asar.unpacked/dist/images/normal_f6f2ad2ad35aba1029c6.png
    .png
  • resources/app.asar.unpacked/dist/images/pressed_7b892b5d6721daecc71f.png
    .png
  • resources/app.asar.unpacked/dist/images/shaft1_04e03f61b8e5ef0e6079.png
    .png
  • resources/app.asar.unpacked/dist/images/shaft_d1528260bf61d878ad6d.png
    .png
  • resources/app.asar.unpacked/dist/images/shaft_empty_f72dc0c5d86815e23f5e.png
    .png
  • resources/app.asar.unpacked/dist/images/top_charge_2f407f5ccc06be69e181.png
    .png
  • resources/app.asar.unpacked/dist/images/triangle_down_157f8da934b94df5bf0f.png
    .png
  • resources/app.asar.unpacked/dist/images/triangle_up_ad4e9ec6f942998e3834.png
    .png
  • resources/app.asar.unpacked/dist/images/user_center_nologin_icon_a99ce8c4aa4462255008.png
    .png
  • resources/app.asar.unpacked/dist/index.html
    .html
  • resources/app.asar.unpacked/dist/index.js
    .js
  • resources/app.asar.unpacked/dist/runtime~index.js
    .js
  • resources/app.asar.unpacked/iot_driver.exe
    .exe windows:6 windows x86 arch:x86

    391a766cdcfb5d84cd77c1b1239575ae


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • resources/app.asar.unpacked/main_dist/index.html
    .html
  • resources/app.asar.unpacked/main_dist/main.js
    .js
  • resources/app.asar.unpacked/main_dist/main.js.LICENSE.txt
  • resources/elevate.exe
    .exe windows:6 windows x86 arch:x86

    c3afe98a750f2d4f1ed5d2ac323cb5e0


    Headers

    Imports

    Sections

  • snapshot_blob.bin
  • v8_context_snapshot.bin
  • vcruntime140.dll
    .dll windows:6 windows x86 arch:x86

    b1497ec17e3cfac16846155a7a629324


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • vk_swiftshader.dll
    .dll windows:5 windows x86 arch:x86

    bd2d4717eeba91c1b9bf3fe06ddeb87b


    Headers

    Imports

    Exports

    Sections

  • vk_swiftshader_icd.json
  • vulkan-1.dll
    .dll windows:5 windows x86 arch:x86

    0c3e803dd8e326c1278d7872e609b579


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    d31c5eb927119d00232e4d4b0e32fcdb


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsis7z.dll
    .dll windows:6 windows x86 arch:x86

    2656ea25cde98f31a490513c2db04ae8


    Headers

    Imports

    Exports

    Sections

  • $R0/Uninstall Attack Shark Driver.exe
    .exe windows:4 windows x86 arch:x86

    b34f154ec913d2d2c435cbd644e91687


    Headers

    Imports

    Sections

  • $PLUGINSDIR/StdUtils.dll
    .dll windows:5 windows x86 arch:x86

    7b79709c0d5576549eb261e3410f95f8


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/WinShell.dll
    .dll windows:4 windows x86 arch:x86

    a75c904bad153f5af2c37cfdf66eba5c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    d31c5eb927119d00232e4d4b0e32fcdb


    Headers

    Imports

    Exports

    Sections