I'm not sure how keypress delay is measured but the rest sounds entirely consistent with the documented MO of North Korean hackers.