Analysis

  • max time kernel
    148s
  • max time network
    146s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    22/07/2026, 11:14

General

  • Target
    AJAZZ AJ179(AJ179P) Mouse V1.1.1.exe
  • Size 4.5MB
  • Sample260722-nb6a1aeb27
  • SHA256 f7eea136c28318055ea2a1ebb2249ae46923d94fc1744fc19bf27c20851e1b05
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 2 IoCs
  • Loads dropped DLL 1 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Drops file in Program Files directory 64 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 3 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of FindShellTrayWindow 2 IoCs
  • Suspicious use of SendNotifyMessage 1 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs
  • Suspicious use of WriteProcessMemory 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\AJAZZ AJ179(AJ179P) Mouse V1.1.1.exe
    "C:\Users\Admin\AppData\Local\Temp\AJAZZ AJ179(AJ179P) Mouse V1.1.1.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:4716
    • C:\Users\Admin\AppData\Local\Temp\is-66P39.tmp\AJAZZ AJ179(AJ179P) Mouse V1.1.1.tmp
      "C:\Users\Admin\AppData\Local\Temp\is-66P39.tmp\AJAZZ AJ179(AJ179P) Mouse V1.1.1.tmp" /SL5="$400A0,3909552,781824,C:\Users\Admin\AppData\Local\Temp\AJAZZ AJ179(AJ179P) Mouse V1.1.1.exe"
      2⤵
      • Executes dropped EXE
      • Drops file in Program Files directory
      • System Location Discovery: System Language Discovery
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of WriteProcessMemory
      PID:5736
      • C:\Program Files\AJAZZ\AJ179 Mouse\AJAZZ AJ179 Mouse.exe
        "C:\Program Files\AJAZZ\AJ179 Mouse\AJAZZ AJ179 Mouse.exe"
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • System Location Discovery: System Language Discovery
        • Suspicious use of FindShellTrayWindow
        • Suspicious use of SendNotifyMessage
        • Suspicious use of SetWindowsHookEx
        PID:4844

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        AJAZZ AJ179 Mouse.exe

        • Path C:\Program Files\AJAZZ\AJ179 Mouse\AJAZZ AJ179 Mouse.exe
        • Size 8.4MB
        • SHA256 a95b757fcc2cc20638c3d794abac25274bffe00f12ac84f9456b938810489f16
        • MD5 SHA1 SHA512 SSDEEP TLSH

        KeyboardHook.dll

        • Path C:\Program Files\AJAZZ\AJ179 Mouse\KeyboardHook.dll
        • Size 10KB
        • SHA256 13a780a96cb9f924bdcfa6525f863c7f534b6c959f3f914a09ef2a3847b281b7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        add_nr.png

        • Path C:\Program Files\AJAZZ\AJ179 Mouse\skins\add_nr.png
        • Size 2KB
        • SHA256 b189e0e1468abe5127dec9feda3fda08836691757c54614e34dbc381224c7974
        • MD5 SHA1 SHA512 TLSH

        add_ov.png

        • Path C:\Program Files\AJAZZ\AJ179 Mouse\skins\add_ov.png
        • Size 2KB
        • SHA256 4b9c363c26319c6e6f70b1ccc41375cbcf29c73f9b3bcacbe1c4ca95482c9d22
        • MD5 SHA1 SHA512 TLSH

        battery_charging.png

        • Path C:\Program Files\AJAZZ\AJ179 Mouse\skins\battery_charging.png
        • Size 3KB
        • SHA256 8f7555b1c79366d8e76ded8c503773fe713e232d9d22c0062de179e65a4efead
        • MD5 SHA1 SHA512 TLSH

        battery_empty.png

        • Path C:\Program Files\AJAZZ\AJ179 Mouse\skins\battery_empty.png
        • Size 2KB
        • SHA256 760354c2e2889d612b4396b5416af510aad99768003e29149790e6cda6642df5
        • MD5 SHA1 SHA512 TLSH

        battery_full.png

        • Path C:\Program Files\AJAZZ\AJ179 Mouse\skins\battery_full.png
        • Size 3KB
        • SHA256 d3865dd9077b866cfa841f66d54431d20da652f4f974f07633d5f82df054ee27
        • MD5 SHA1 SHA512 TLSH

        battery_green.png

        • Path C:\Program Files\AJAZZ\AJ179 Mouse\skins\battery_green.png
        • Size 2KB
        • SHA256 686bbfdfdcef7cf7e448b6ec6198ab7cfe9fe03da2ff5f37e2750b302a684653
        • MD5 SHA1 SHA512 TLSH

        battery_lighting.png

        • Path C:\Program Files\AJAZZ\AJ179 Mouse\skins\battery_lighting.png
        • Size 2KB
        • SHA256 dc03a0d575a77a1086bf03378ad5004a24bf296a7497d63a2938c1eaccc8bd80
        • MD5 SHA1 SHA512 TLSH

        battery_orange.png

        • Path C:\Program Files\AJAZZ\AJ179 Mouse\skins\battery_orange.png
        • Size 2KB
        • SHA256 5a1355e628a38bdafdbf18bd65ea07a7ffee0669648e3ecbf665a65931872215
        • MD5 SHA1 SHA512 TLSH

        battery_red.png

        • Path C:\Program Files\AJAZZ\AJ179 Mouse\skins\battery_red.png
        • Size 2KB
        • SHA256 e8b2b0a74e5ef38942d1628614fe19bc79ae75b67d4fe3d921b26e95be388e8d
        • MD5 SHA1 SHA512 TLSH

        button1_nr.png

        • Path C:\Program Files\AJAZZ\AJ179 Mouse\skins\button1_nr.png
        • Size 2KB
        • SHA256 ee0dd51da59ce0a6cae0791452d5cb84cff2ed8bee6e650a8bc8a45262bf14db
        • MD5 SHA1 SHA512 TLSH

        button1_ov.png

        • Path C:\Program Files\AJAZZ\AJ179 Mouse\skins\button1_ov.png
        • Size 3KB
        • SHA256 ea10403aa4dbc33d4b33b08fca1d82313f3fc3842260279e884f7d9598624db9
        • MD5 SHA1 SHA512 TLSH

        button2_nr.png

        • Path C:\Program Files\AJAZZ\AJ179 Mouse\skins\button2_nr.png
        • Size 2KB
        • SHA256 fac71ffb7a6b844045682e59d212d9adbf5f22c4878e57c6dfd39889bdcd407f
        • MD5 SHA1 SHA512 TLSH

        button2_ov.png

        • Path C:\Program Files\AJAZZ\AJ179 Mouse\skins\button2_ov.png
        • Size 2KB
        • SHA256 9a2f21868fd0ad0f7abaaa218c0481e983334f6e5af499aef2c77e64adf566ac
        • MD5 SHA1 SHA512 TLSH

        check_button_dpi_nr.png

        • Path C:\Program Files\AJAZZ\AJ179 Mouse\skins\check_button_dpi_nr.png
        • Size 2KB
        • SHA256 f92cb3c5fc8b4d066be25462134adf8641a8853817a1291e9b2f41043e4371c9
        • MD5 SHA1 SHA512 TLSH

        check_dn.png

        • Path C:\Program Files\AJAZZ\AJ179 Mouse\skins\check_dn.png
        • Size 2KB
        • SHA256 6c4689655b178a576f598bc422b0f2f65a2f29f7c06533c5482d6296c10f6dad
        • MD5 SHA1 SHA512 TLSH

        check_nr.png

        • Path C:\Program Files\AJAZZ\AJ179 Mouse\skins\check_nr.png
        • Size 2KB
        • SHA256 06568a9337aabb279e0ca839a258fb0b9554f1bf528546b5d069a385e766711e
        • MD5 SHA1 SHA512 TLSH

        check_ov.png

        • Path C:\Program Files\AJAZZ\AJ179 Mouse\skins\check_ov.png
        • Size 2KB
        • SHA256 12e9dd4c3128bbb0d14995a5f7bd7895074f824cdcf747c8220b61dca6bd923d
        • MD5 SHA1 SHA512 TLSH

        exit_nr.png

        • Path C:\Program Files\AJAZZ\AJ179 Mouse\skins\exit_nr.png
        • Size 3KB
        • SHA256 24a862e0fb4c0bf8d3cc68be6770e88cb6caab4c7566171388e5892980ddbf5c
        • MD5 SHA1 SHA512 TLSH

        exit_ov.png

        • Path C:\Program Files\AJAZZ\AJ179 Mouse\skins\exit_ov.png
        • Size 3KB
        • SHA256 be6475e4586b62a635a0eb2ddf7cbe383537ad8d6d1ac75b753e1c837276dd74
        • MD5 SHA1 SHA512 TLSH

        header2_nr.png

        • Path C:\Program Files\AJAZZ\AJ179 Mouse\skins\header2_nr.png
        • Size 2KB
        • SHA256 fedcb0fae37293d7e16726865f09816ad23085d44e2b5f100f705c3db83a8951
        • MD5 SHA1 SHA512 TLSH

        header2_ov.png

        • Path C:\Program Files\AJAZZ\AJ179 Mouse\skins\header2_ov.png
        • Size 2KB
        • SHA256 998d0e40b4466e091459fe2fe623324ede2f999fc8a7a95868744e8b8edf4f64
        • MD5 SHA1 SHA512 TLSH

        header_nr.png

        • Path C:\Program Files\AJAZZ\AJ179 Mouse\skins\header_nr.png
        • Size 2KB
        • SHA256 f62c197e5ffbe3ddd5db5a607c4b7561a405a6cddde548fdcf98d836dac72d7b
        • MD5 SHA1 SHA512 TLSH

        header_ov.png

        • Path C:\Program Files\AJAZZ\AJ179 Mouse\skins\header_ov.png
        • Size 2KB
        • SHA256 c0fe7aeb13f582782628bd2b8cff9775a4c1a87b0212fd0f53ece83faee517c9
        • MD5 SHA1 SHA512 TLSH

        min_nr.png

        • Path C:\Program Files\AJAZZ\AJ179 Mouse\skins\min_nr.png
        • Size 2KB
        • SHA256 f474dd16aea6c024429fed302e00b51faed0c0ac8e82b0fce0b2cacb10c24be3
        • MD5 SHA1 SHA512 TLSH

        min_ov.png

        • Path C:\Program Files\AJAZZ\AJ179 Mouse\skins\min_ov.png
        • Size 2KB
        • SHA256 6447f8e7d95fee7c1125a81202e56df3694dce571e7cf1c1408179207acc843c
        • MD5 SHA1 SHA512 TLSH

        mouse_nr.png

        • Path C:\Program Files\AJAZZ\AJ179 Mouse\skins\mouse\mouse_nr.png
        • Size 45KB
        • SHA256 f5da856bf9339321c348f1bb646f4552d727d36852a8659391d997230da1fe62
        • MD5 SHA1 SHA512 SSDEEP TLSH

        serial_number1.png

        • Path C:\Program Files\AJAZZ\AJ179 Mouse\skins\mouse\serial_number1.png
        • Size 3KB
        • SHA256 43007fce7761666b78b3c0ee37eaa0112a69e7917e25a4a60300bc6daeca94d7
        • MD5 SHA1 SHA512 TLSH

        serial_number2.png

        • Path C:\Program Files\AJAZZ\AJ179 Mouse\skins\mouse\serial_number2.png
        • Size 3KB
        • SHA256 c8d118e6cd24de9dd79470d485f4ffc57e4158c8dce093892672ea569fb05ae4
        • MD5 SHA1 SHA512 TLSH

        serial_number3.png

        • Path C:\Program Files\AJAZZ\AJ179 Mouse\skins\mouse\serial_number3.png
        • Size 3KB
        • SHA256 b4702d26017bd4d2ca1e26f928dc88d9fdc71de115154b7aead3d34ffec850ca
        • MD5 SHA1 SHA512 TLSH

        serial_number4.png

        • Path C:\Program Files\AJAZZ\AJ179 Mouse\skins\mouse\serial_number4.png
        • Size 3KB
        • SHA256 600c436bdc88c91f5862fb995ec73882ee708acc36a0d296d87511629b146f3f
        • MD5 SHA1 SHA512 TLSH

        serial_number5.png

        • Path C:\Program Files\AJAZZ\AJ179 Mouse\skins\mouse\serial_number5.png
        • Size 3KB
        • SHA256 44ea506fedb65eb7051ae5a46191b797eecb1acb9a307e646dbccd50a6e1eb37
        • MD5 SHA1 SHA512 TLSH

        serial_number6.png

        • Path C:\Program Files\AJAZZ\AJ179 Mouse\skins\mouse\serial_number6.png
        • Size 3KB
        • SHA256 3d13c576a30a80e981eca1cf5c549303be6930019a9153d16bd105a4e86afaf2
        • MD5 SHA1 SHA512 TLSH

        serial_number7.png

        • Path C:\Program Files\AJAZZ\AJ179 Mouse\skins\mouse\serial_number7.png
        • Size 3KB
        • SHA256 7b0c1baceb59e523ef81086aac7858ae0c44093a8f91be845ec6ef2228ae034f
        • MD5 SHA1 SHA512 TLSH

        serial_number8.png

        • Path C:\Program Files\AJAZZ\AJ179 Mouse\skins\mouse\serial_number8.png
        • Size 3KB
        • SHA256 bd484905387b4d6790585b45384eb4723fbdb7c62dc365d1ae0e48f074990c5b
        • MD5 SHA1 SHA512 TLSH

        serial_number9.png

        • Path C:\Program Files\AJAZZ\AJ179 Mouse\skins\mouse\serial_number9.png
        • Size 3KB
        • SHA256 89d48b4df7e9b9b47b72f827e1d26ef16df14edc132fb0cd549919ea07355475
        • MD5 SHA1 SHA512 TLSH

        power_manage_10min.png

        • Path C:\Program Files\AJAZZ\AJ179 Mouse\skins\power_manage_10min.png
        • Size 15KB
        • SHA256 a4502f35a357a8d71b432fd03d9f4d65337a2d2a8292eaa8f4bf2a181c8dc751
        • MD5 SHA1 SHA512 SSDEEP TLSH

        power_manage_3min.png

        • Path C:\Program Files\AJAZZ\AJ179 Mouse\skins\power_manage_3min.png
        • Size 16KB
        • SHA256 ff6a68263e7b8c1ada943caeadcbf440cab02c51da1bd3126097a5b72e3ab2a3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        power_manage_4min.png

        • Path C:\Program Files\AJAZZ\AJ179 Mouse\skins\power_manage_4min.png
        • Size 16KB
        • SHA256 e26858412ac07d48afc8948925c31d9fab2319af4af2cd4606f2047e1170fbde
        • MD5 SHA1 SHA512 SSDEEP TLSH

        power_manage_5min.png

        • Path C:\Program Files\AJAZZ\AJ179 Mouse\skins\power_manage_5min.png
        • Size 16KB
        • SHA256 2a2ca88a97d04be0d228f6a8e92377963f30cc611647463173c15924a6daf304
        • MD5 SHA1 SHA512 SSDEEP TLSH

        power_manage_6min.png

        • Path C:\Program Files\AJAZZ\AJ179 Mouse\skins\power_manage_6min.png
        • Size 16KB
        • SHA256 30df2fca304bec157f7e3d02b97d36e045a55d125f90562c976cadba98a3f83d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        power_manage_7min.png

        • Path C:\Program Files\AJAZZ\AJ179 Mouse\skins\power_manage_7min.png
        • Size 16KB
        • SHA256 0f5f3b1ec0703ac382c4258f8dd4f757a5ac80512d37478ec2efcbb2c83b240e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        power_manage_8min.png

        • Path C:\Program Files\AJAZZ\AJ179 Mouse\skins\power_manage_8min.png
        • Size 15KB
        • SHA256 ef46cbc31ad77d3ad598a0d6c95e717efda4e048648ac123b61240862ac2e01b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        power_manage_9min.png

        • Path C:\Program Files\AJAZZ\AJ179 Mouse\skins\power_manage_9min.png
        • Size 15KB
        • SHA256 13a5a345d0ceed30338d25f2b5fdf3fc795677fac0d141a979ec54895f21e4ae
        • MD5 SHA1 SHA512 SSDEEP TLSH

        profile_slot_nr.png

        • Path C:\Program Files\AJAZZ\AJ179 Mouse\skins\profile_slot_nr.png
        • Size 2KB
        • SHA256 df26d1ed036bb610817c7d41d16fd41fdd4eb7f513736b25e539a13e02f1c1a4
        • MD5 SHA1 SHA512 TLSH

        profile_slot_nr2.png

        • Path C:\Program Files\AJAZZ\AJ179 Mouse\skins\profile_slot_nr2.png
        • Size 2KB
        • SHA256 16db02e407881ca0dadd1bc1867cf0568d21cf6d5d1a9045b3a58b4e9f0ef497
        • MD5 SHA1 SHA512 TLSH

        profile_slot_ov.png

        • Path C:\Program Files\AJAZZ\AJ179 Mouse\skins\profile_slot_ov.png
        • Size 2KB
        • SHA256 8d04d7de1bac80641b7f644d44806c16d1209c902360162cb6039e490d64a2a7
        • MD5 SHA1 SHA512 TLSH

        profile_slot_ov2.png

        • Path C:\Program Files\AJAZZ\AJ179 Mouse\skins\profile_slot_ov2.png
        • Size 3KB
        • SHA256 898baf52c0dcfa2173554b0293e84597859933a36b1a99ef5f578e69b7e8bc7f
        • MD5 SHA1 SHA512 TLSH

        unins000.exe

        • Path C:\Program Files\AJAZZ\AJ179 Mouse\unins000.exe
        • Size 3.0MB
        • SHA256 d9ab08448a06aaeaf886a4cc6f34e379d9d267431ed3f93aa4ba9f70fdec22aa
        • MD5 SHA1 SHA512 SSDEEP TLSH

        AJAZZ AJ179(AJ179P) Mouse V1.1.1.tmp

        • Path C:\Users\Admin\AppData\Local\Temp\is-66P39.tmp\AJAZZ AJ179(AJ179P) Mouse V1.1.1.tmp
        • Size 3.0MB
        • SHA256 9e1090a3b37b805931f26b0761a3e072543986660ca320a7b328c9537fc42e51
        • MD5 SHA1 SHA512 SSDEEP TLSH

        LanSetting.ini

        • Path C:\Users\Admin\AppData\Roaming\GamingMouseData202400617\config\LanSetting.ini
        • Size 60B
        • SHA256 740f7d0af65a3988d40038c4a89f93de1e1dcfe2b3d6abc8170cedfd91f805ab
        • MD5 SHA1 SHA512 TLSH

        Lan_EN.txt

        • Path C:\Users\Admin\AppData\Roaming\GamingMouseData202400617\config\Lan_EN.txt
        • Size 7KB
        • SHA256 f72d7df4e839803f9197712521b7b94e3ff396cb464c20e47beb60e74a6f7e13
        • MD5 SHA1 SHA512 SSDEEP TLSH

        MacroLibraryFile.mlf

        • Path C:\Users\Admin\AppData\Roaming\GamingMouseData202400617\config\MacroLibraryFile.mlf
        • Size 198B
        • SHA256 d0ca925d6a7f34eb2530178e681acf2b82d84bbc8ec0504f667851dbb573c65d
        • MD5 SHA1 SHA512 TLSH

        config.ini

        • Path C:\Users\Admin\AppData\Roaming\GamingMouseData202400617\config\config.ini
        • Size 1KB
        • SHA256 422d47ac3c7816369fc98810043dcff0fb2fc24c5d2a5b9903b4ecc8e8423e4d
        • MD5 SHA1 SHA512 TLSH

        default0.psf

        • Path C:\Users\Admin\AppData\Roaming\GamingMouseData202400617\config\default0.psf
        • Size 31KB
        • SHA256 70b7ec37a3988efff5246194eb1a2a0fc9daf2c8f2140db16a469a2df3b94cf9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        default1.psf

        • Path C:\Users\Admin\AppData\Roaming\GamingMouseData202400617\config\default1.psf
        • Size 31KB
        • SHA256 d56ab4d59d3cd07d58f128c52fb2a5866bcdf06bd49e080c2a1e2fb24e15c93b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        default2.psf

        • Path C:\Users\Admin\AppData\Roaming\GamingMouseData202400617\config\default2.psf
        • Size 31KB
        • SHA256 bd4d0202551b6fb663b06b53134068b529a0f0cc4432e89577ad8e134186d1d1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        default3.psf

        • Path C:\Users\Admin\AppData\Roaming\GamingMouseData202400617\config\default3.psf
        • Size 31KB
        • SHA256 a5e3e2905e80ada0a5c091f1e281d14c78e7be4087be986d0b3b853d0ec75c16
        • MD5 SHA1 SHA512 SSDEEP TLSH

        default4.psf

        • Path C:\Users\Admin\AppData\Roaming\GamingMouseData202400617\config\default4.psf
        • Size 31KB
        • SHA256 03ebdc71b3c0680ee3dde432e51126bc46756e736a4664e7af3f251099bd83b7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        memory/4716-402-0x0000000000400000-0x00000000004CC000-memory.dmp

        memory/4716-0-0x0000000000400000-0x00000000004CC000-memory.dmp

        memory/4716-8-0x0000000000400000-0x00000000004CC000-memory.dmp

        memory/5736-325-0x0000000000400000-0x000000000070A000-memory.dmp

        memory/5736-14-0x0000000000400000-0x000000000070A000-memory.dmp

        memory/5736-12-0x0000000000400000-0x000000000070A000-memory.dmp

        memory/5736-9-0x0000000000400000-0x000000000070A000-memory.dmp

        memory/5736-10-0x0000000002750000-0x0000000002751000-memory.dmp

        memory/5736-6-0x0000000002750000-0x0000000002751000-memory.dmp

        memory/5736-401-0x0000000000400000-0x000000000070A000-memory.dmp