ab398b4abf7e231c3cf4bdd055d0f876d01d4c8045b7bc00e1ab4cca4b97e548

Sharing

Copy URL Twitter E-mail

General

Target
AJAZZ AK820 ╙╨╧▀RGB Keyboard.exe
Size 42.4MB
Sample260910-3zlzlafb24
SHA256 ab398b4abf7e231c3cf4bdd055d0f876d01d4c8045b7bc00e1ab4cca4b97e548
MD5 00fdb57f2faa5dc495fbe5606a6e2032
SHA1 8a7a7ea6700b20a5e1e9f8c379701417ed55c0de
SHA512 f40ce97acd006292b95c853231ff90fcf459e60899bd6bbe129257a80ad130b6931a53102045c0061a2a8d05a1e9d65ecba6cd4b72a81b1163cdbf1e1b264d93
SSDEEP 786432:e6r92oW6zOp9cwrB54J2NiY20/MdUoQcC98XxvKOmOrbofE8P34CbVI+ULcsY1:dYoNzeLBOY8Yznh980goE8P34CbVI0ss
TLSH
T1A4A733EE7E64CD8CC8AD4030C9B03A170C745CAD4B7B863E66713E46663E9B4B29535B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

discovery

Malware Config

Targets

- Target
  AJAZZ AK820 ╙╨╧▀RGB Keyboard.exe
- Size 42.4MB
- SHA256 ab398b4abf7e231c3cf4bdd055d0f876d01d4c8045b7bc00e1ab4cca4b97e548
- MD5 00fdb57f2faa5dc495fbe5606a6e2032
- SHA1 8a7a7ea6700b20a5e1e9f8c379701417ed55c0de
- SHA512 f40ce97acd006292b95c853231ff90fcf459e60899bd6bbe129257a80ad130b6931a53102045c0061a2a8d05a1e9d65ecba6cd4b72a81b1163cdbf1e1b264d93
- SSDEEP 786432:e6r92oW6zOp9cwrB54J2NiY20/MdUoQcC98XxvKOmOrbofE8P34CbVI+ULcsY1:dYoNzeLBOY8Yznh980goE8P34CbVI0ss
- TLSH
  T1A4A733EE7E64CD8CC8AD4030C9B03A170C745CAD4B7B863E66713E46663E9B4B29535B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Drops file in System32 directory
behavioral1
- Target
  $PLUGINSDIR/BgWorker.dll
- Size 2KB
- SHA256 50f735ab8f3473423e6873d628150bbc0777be7b4f6405247cddf22bb00fb6be
- MD5 33ec04738007e665059cf40bc0f0c22b
- SHA1 4196759a922e333d9b17bda5369f14c33cd5e3bc
- SHA512 2318b01f0c2f2f021a618ca3e6e5c24a94df5d00154766b77160203b8b0a177c8581c7b688ffe69be93a69bc7fd06b8a589844d42447f5060fb4bcf94d8a9aef
- TLSH
  T1C351B72E612C0BFFC2963C34BC96795B1B6FC060A39A6328813FC5853C141B4233DB2A
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral2
- Target
  $PLUGINSDIR/System.dll
- Size 11KB
- SHA256 7851cb12fa4131f1fee5de390d650ef65cac561279f1cfe70ad16cc9780210af
- MD5 bf712f32249029466fa86756f5546950
- SHA1 75ac4dc4808ac148ddd78f6b89a51afbd4091c2e
- SHA512 13f69959b28416e0b8811c962a49309dca3f048a165457051a28a3eb51377dcaf99a15e86d7eee8f867a9e25ecf8c44da370ac8f530eeae7b5252eaba64b96f4
- SSDEEP 192:0N2gQuUwXzioj4KALV2upWzVd7q1QDXEbBZ8KxHdGzyS/Kx:rJoiO8V2upW7vQjS/
- TLSH
  T1DC3229328B60C1F2D561C274496B3A3367B9761420B04D67DFB78446EC16AD66E3E327
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3
- Target
  $PLUGINSDIR/nsNiuniuSkin.dll
- Size 896KB
- SHA256 148cb136ff5ae9711ddb869b5f22065ee89e13eaf5081ce39c07dbe89ccd97b7
- MD5 1834fd72e6a7387749d014a30b53d6ac
- SHA1 e6c51f9f578e86e376501fc08f6d80cfe11bdb52
- SHA512 c8247a7916c718311a0f458cbb2133d77e3950609bb2c4b9470a9a7725a1d4d595422fb8c3c42f34629fd045675c72b221fee26a5188b9df4a0f3099857ec204
- SSDEEP 24576:/pIQCUFPxa+iDkpxMJIpgT62mQh8lZIn:oUFPxarJICm25oZE
- TLSH
  T161156D10DD41A136FEFB04F5497F66BDA528BA31031450CBA2C4AEAE9B359F27D31227
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral4
- Target
  $PLUGINSDIR/nsis7zU.dll
- Size 313KB
- SHA256 e4ab3064f2e094910ae80104ef9d371ccb74ebbeeed592582cf099acd83f5fe9
- MD5 06a47571ac922f82c098622b2f5f6f63
- SHA1 8a581c33b7f2029c41edaad55d024fc0d2d7c427
- SHA512 04b3d18042f1faa536e1393179f412a5644d2cf691fbc14970f79df5c0594eeedb0826b495807a3243f27aaa0380423c1f975fe857f32e057309bb3f2a529a83
- SSDEEP 6144:rA9ssOlBrbYr5UP4m3mC/FvBbhQ1JzI+yQKiJGxdNtsm0:r2S165UP4mL/FvBtC8zQdSDmm0
- TLSH
  T196649D22B690C07AC5AF03316D18B7A491FEB6718A34C70BF7D84B5E2E771C29A14B57
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5
- Target
  AJAZZ AK820 有线RGB Keyboard.exe
- Size 3.5MB
- SHA256 93316d45e62776bf1099c8c57ecb326fd8eadbde4fefa9a13ad491fc203e3b5b
- MD5 0d11811e75ccc40fcaa5a3e9f2e2b725
- SHA1 c9f7d255f2c494f995967ea3641f86a91183bcbf
- SHA512 74650b3822ce6bf031f8baf372b8eeeba6aaccccd27af73d05956061e47dca2ef4250ba95cf9fc8740dacceff6244b70885275ee1ed196f17ce9da16f3db98f9
- SSDEEP 49152:1TaO9N/PpDgIX75GI2p5JKf8veAR8WwQRJ5HcOHBztB7W77NaWQ442:1WOnPpDgsVGRp5JK0GAeWwQRJOS7W7F
- TLSH
  T1FE067D20BE904937E9A70231496DB2FD746DAD701B3580DB63D03F6C2A787E26A35B17
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral6
- Target
  AudioRecord.exe
- Size 261KB
- SHA256 4e1c027b4c3105063d40ef57e9979a40cb9c72fe6cd54f17d9f3c8ecaece71ae
- MD5 90a57d3ec2ccf2ff6dd5816483febd7b
- SHA1 2ee20b701582a172def5dfb3b4ab3fe2e573c07b
- SHA512 8214b7593ce3138bcbe916f4795e426dde1d1a353f58ee3513cb3dfe69a8108b6c6796131c75ffb5099ad4e6eaf595034b556185c5558c675645c88e9b676320
- SSDEEP 3072:Fb2aS0miVpwNaPfQ1hElRwBtr9sS9VQOnhKWTbU:Xci8YUjGOnE2U
- TLSH
  T117442701B5C1C471D7E569340FA0D9704B28EDAC4A6049A737F43E5F7AFC2D36A32A6A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7
- Target
  DuiLib.dll
- Size 1.4MB
- SHA256 566523e35690e35652a282e3b450b89287bc80f9bd2b4ba1c7da2a3d8016d5c7
- MD5 b055bbe734a2c3208e6382ad66e1f74b
- SHA1 188bc5506d585e4771be1cf8de6316c4517ebbe2
- SHA512 3bce189005f3416b28c0fd1aaa007536a853a1e07023e508f66012779e519901e7879b52bc74f6e3d71aa6ade2251e925ecae6319bdede388325d4b782e4d906
- SSDEEP 24576:SpfwYaSXprwL3VAI06pPkbDJs/TiyR8Ypv5wisx:EwxE83a6pPSDC+uwisx
- TLSH
  T137656C01A5419132FDB780768FBE687DA91DA920131891D7A3C84EBACB36DF27D32717
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral8
- Target
  HookDLL.dll
- Size 44KB
- SHA256 9ab5e1ccff616db6e9a7d571b1d932953abadf85a489194827aee8326e436b12
- MD5 1fd575a0b0ff4e5648f6552eaa6dd10b
- SHA1 38c63be2d74fdf8fbe002ea513e2f4d42a40f908
- SHA512 c6586e43fa3d0c9be6b7fa7a5c69032af8789f861d4ee6b3de7e019ee54e7f9a392dfcd70c52e7cf30608093c60e8aa6fab46b481b4204323febef6102f5656e
- SSDEEP 768:A0MxliBRt2uw294n0Guc7TVrDh9VGgXZ8n+19Yl5C5pYtd4F5i5klWantEDodvyk:ALu92Z7TVB9Vd2
- TLSH
  T18D132A1076958133E39326381AFDD3B989AF784167F2105B3BB919FE4F607C19A39326
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral9
- Target
  SDK/x64/vista/osConfLib.dll
- Size 250KB
- SHA256 20c58530e75179529fc7af38141730cd77815251cb94f5dee296790a0d9ea3b6
- MD5 4ab0fcf586cf65c22a273df0d1a30380
- SHA1 375318b2319d97eca36794e888913e54bb9a767a
- SHA512 7e42ab21c4eda0faf1860696bf02ab533f41be2e7c85e4ecf72695fe6acd40ed6257770a1c97e918604a30bee5804ca5393736559d3886a42e4b4226f535503f
- SSDEEP 6144:/SGC2ZCT2VO2Cr3ndhZd2fnjtEe1vtUE6I55Wdi8v:/Sb2ZCT2VO2CzP2fhjtUhI5Gd
- TLSH
  T14B444A47B3A50CB9E827C1798F639226EB7278451720D7CF5760462A5F23BF19A3A321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10
- Target
  SDK/x86/vista/osConfLib.dll
- Size 236KB
- SHA256 b3997b03c2f842386af172cb96c2c63af4e5a69dfe07693646e5c23764a52127
- MD5 7949df4e02ba69f8eed0fc7059b1f96c
- SHA1 328b134d3f4f12133d927910a34ce0f123c5f7f7
- SHA512 2b242905a2e22a699ac4ef39f3a25b19e077a6c1b0962c6436ee3bbdb45dfa0b9bad36f56e63076320737faacf4b9fc1773c02f7263b91f49f993308781081cc
- SSDEEP 6144:bG4uJVVrV1+ZXp+0ob9j1lIu7ZpuAOCpi:bG4udfUpZob9jIu7ZUZ
- TLSH
  T10234AE12F6D392FBE4762470256BA72A5777B6300324C4DBABE41D2ACD317D0767222B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral11
- Target
  Updata/升级包-S2_12_049-B-VS11K28A-盛冠SG8948-AK820-MAC-V0102-CS590C-20230621.exe
- Size 3.1MB
- SHA256 130b199532e01792c189b76c86960dedecf8144449ad7e800927e5393a360f28
- MD5 9bce82742aadd7765d248d37f99591aa
- SHA1 0fe46d6956a201deb75a4a0c02fc9538a3f07561
- SHA512 5341efb61638fb8e6fb8fb154f558e42816fdfbc8e61bfba0c93c1b66fd5ff211a958452cb6a6618efb56b32327175282a489f3105060bf597c6a05d51c13e50
- SSDEEP 98304:EM8rXjVexW9Wpjv8/34Uv/t3WOZCWyHa1Sqoodq+1Y/LWIguK3wr:VitWpiCvWSmHEWIguGwr
- TLSH
  T17BE58C323B81843AD2633130895EA3F9A6ADDD305F7542D796813A3E2F745D24A3C66F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral12
- Target
  Updata/测试版升级包-S2_12_049-B-VS11K28A-盛冠SG8948-AK820-MAC-V0103-CSD228-20230909.exe
- Size 3.1MB
- SHA256 49b024fc7fdc3081679d7e1c0caf96b01028137476683829272388a68a5026f2
- MD5 849f7ccb5c2055e6f091da0e77d2937a
- SHA1 2dda7cd01d73edb5ee6395f87f3cb5e9cdbde464
- SHA512 4d6c984dc10aaf9eb16e22976e9ff9a0c0ad6f07f160ec97548c7382066ac91d7141d691868a702002a219f031ba89a3bc877f3ac22518aaafc02bc5ba0a920c
- SSDEEP 98304:kM8rXjVexW9Wpjv8/34Uv/t3WOZCWyHa1Sqoodq+1Y/LWIguK3eP:1itWpiCvWSmHEWIguGeP
- TLSH
  T14CE58C323B81843AD2633130895EA3F9A6ADDD305F7542D796813A3E2F745D24A3C66F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral13

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Checks computer location settings

Drops file in System32 directory

Checks computer location settings

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13