Extracted

• • Target
    KB922L Gaming Keyboard_Installer_V2.06.02.exe
  • Size 16.1MB
  • SHA256 399f463a8d9997eb759b773e404e5eb498db9320aa6b5094a65bfe0287a64029
  • MD5 6a6975e57ff620dae7c4e5473685ee63
  • SHA1 6a115ee08cf6b28f9c9eedd4b4dda95b053d5e1c
  • SHA512 db5a9748529a77387e2fddef49bfffba6437966f419ff0e34999e74619fbc0c199b6ca8218a402c3473b66f39e28cda7ef8bfe50afeef95a00b212e56a5820dd
  • SSDEEP 393216:wuL4k4tdSHJGK8/gIbajE9ZbjEo01mqOfHZ1sQiJFVB:FAwHJm/gPEDbjLXsbjB
  • TLSH
    T15E07332F16C5C433D0156A38C060465DAC523F80B9DEE19E3C7EE91F1B76AC7A879A87
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defense_evasiondiscoveryinstallerpersistenceadwareransomwarespyware

  • Boot or Logon Autostart Execution: Active Setup

    Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    persistence

  • Executes dropped EXE

  • Loads dropped DLL

  • Modifies file permissions

    discovery

  • Adds Run key to start application

    persistence

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  behavioral1behavioral2