Overview
overview
5Static
static
3Shotgun.Ki...37.zip
windows7-x64
1Shotgun.Ki...37.zip
windows10-2004-x64
1Shotgun.Ki...!!.txt
windows7-x64
1Shotgun.Ki...!!.txt
windows10-2004-x64
1Shotgun.Ki...PC.url
windows7-x64
1Shotgun.Ki...PC.url
windows10-2004-x64
1Shotgun.Ki...L2.dll
windows7-x64
1Shotgun.Ki...L2.dll
windows10-2004-x64
5Shotgun.Ki...ta.sgr
windows7-x64
3Shotgun.Ki...ta.sgr
windows10-2004-x64
3Shotgun.Ki...dk.dll
windows7-x64
1Shotgun.Ki...dk.dll
windows10-2004-x64
1Shotgun.Ki...ch.txt
windows7-x64
1Shotgun.Ki...ch.txt
windows10-2004-x64
1Shotgun.Ki...an.txt
windows7-x64
1Shotgun.Ki...an.txt
windows10-2004-x64
1Shotgun.Ki...se.txt
windows7-x64
1Shotgun.Ki...se.txt
windows10-2004-x64
1Shotgun.Ki...an.txt
windows7-x64
1Shotgun.Ki...an.txt
windows10-2004-x64
1Shotgun.Ki...sh.txt
windows7-x64
1Shotgun.Ki...sh.txt
windows10-2004-x64
1Shotgun.Ki...an.txt
windows7-x64
1Shotgun.Ki...an.txt
windows10-2004-x64
1Shotgun.Ki...sh.txt
windows7-x64
1Shotgun.Ki...sh.txt
windows10-2004-x64
1Shotgun.Ki...an.txt
windows7-x64
1Shotgun.Ki...an.txt
windows10-2004-x64
1Shotgun.Ki...ng.bat
windows7-x64
3Shotgun.Ki...ng.bat
windows10-2004-x64
3Shotgun.Ki...RT.bat
windows7-x64
1Shotgun.Ki...RT.bat
windows10-2004-x64
1Analysis
-
max time kernel
135s -
max time network
272s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system -
submitted
01-08-2023 06:51
Static task
static1
Behavioral task
behavioral1
Sample
Shotgun.King.The.Final.Checkmate.v1.37.zip
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
Shotgun.King.The.Final.Checkmate.v1.37.zip
Resource
win10v2004-20230703-en
Behavioral task
behavioral3
Sample
Shotgun.King.The.Final.Checkmate.v1.37/HOW TO RUN GAME!!.txt
Resource
win7-20230712-en
Behavioral task
behavioral4
Sample
Shotgun.King.The.Final.Checkmate.v1.37/HOW TO RUN GAME!!.txt
Resource
win10v2004-20230703-en
Behavioral task
behavioral5
Sample
Shotgun.King.The.Final.Checkmate.v1.37/STEAMUNLOCKED » Free Steam Games Pre-installed for PC.url
Resource
win7-20230712-en
Behavioral task
behavioral6
Sample
Shotgun.King.The.Final.Checkmate.v1.37/STEAMUNLOCKED » Free Steam Games Pre-installed for PC.url
Resource
win10v2004-20230703-en
Behavioral task
behavioral7
Sample
Shotgun.King.The.Final.Checkmate.v1.37/Shotgun.King.The.Final.Checkmate.v1.37/SDL2.dll
Resource
win7-20230712-en
Behavioral task
behavioral8
Sample
Shotgun.King.The.Final.Checkmate.v1.37/Shotgun.King.The.Final.Checkmate.v1.37/SDL2.dll
Resource
win10v2004-20230703-en
Behavioral task
behavioral9
Sample
Shotgun.King.The.Final.Checkmate.v1.37/Shotgun.King.The.Final.Checkmate.v1.37/data.sgr
Resource
win7-20230712-en
Behavioral task
behavioral10
Sample
Shotgun.King.The.Final.Checkmate.v1.37/Shotgun.King.The.Final.Checkmate.v1.37/data.sgr
Resource
win10v2004-20230703-en
Behavioral task
behavioral11
Sample
Shotgun.King.The.Final.Checkmate.v1.37/Shotgun.King.The.Final.Checkmate.v1.37/discord_game_sdk.dll
Resource
win7-20230712-en
Behavioral task
behavioral12
Sample
Shotgun.King.The.Final.Checkmate.v1.37/Shotgun.King.The.Final.Checkmate.v1.37/discord_game_sdk.dll
Resource
win10v2004-20230703-en
Behavioral task
behavioral13
Sample
Shotgun.King.The.Final.Checkmate.v1.37/Shotgun.King.The.Final.Checkmate.v1.37/lang/french.txt
Resource
win7-20230712-en
Behavioral task
behavioral14
Sample
Shotgun.King.The.Final.Checkmate.v1.37/Shotgun.King.The.Final.Checkmate.v1.37/lang/french.txt
Resource
win10v2004-20230703-en
Behavioral task
behavioral15
Sample
Shotgun.King.The.Final.Checkmate.v1.37/Shotgun.King.The.Final.Checkmate.v1.37/lang/german.txt
Resource
win7-20230712-en
Behavioral task
behavioral16
Sample
Shotgun.King.The.Final.Checkmate.v1.37/Shotgun.King.The.Final.Checkmate.v1.37/lang/german.txt
Resource
win10v2004-20230703-en
Behavioral task
behavioral17
Sample
Shotgun.King.The.Final.Checkmate.v1.37/Shotgun.King.The.Final.Checkmate.v1.37/lang/japanese.txt
Resource
win7-20230712-en
Behavioral task
behavioral18
Sample
Shotgun.King.The.Final.Checkmate.v1.37/Shotgun.King.The.Final.Checkmate.v1.37/lang/japanese.txt
Resource
win10v2004-20230703-en
Behavioral task
behavioral19
Sample
Shotgun.King.The.Final.Checkmate.v1.37/Shotgun.King.The.Final.Checkmate.v1.37/lang/korean.txt
Resource
win7-20230712-en
Behavioral task
behavioral20
Sample
Shotgun.King.The.Final.Checkmate.v1.37/Shotgun.King.The.Final.Checkmate.v1.37/lang/korean.txt
Resource
win10v2004-20230703-en
Behavioral task
behavioral21
Sample
Shotgun.King.The.Final.Checkmate.v1.37/Shotgun.King.The.Final.Checkmate.v1.37/lang/polish.txt
Resource
win7-20230712-en
Behavioral task
behavioral22
Sample
Shotgun.King.The.Final.Checkmate.v1.37/Shotgun.King.The.Final.Checkmate.v1.37/lang/polish.txt
Resource
win10v2004-20230703-en
Behavioral task
behavioral23
Sample
Shotgun.King.The.Final.Checkmate.v1.37/Shotgun.King.The.Final.Checkmate.v1.37/lang/russian.txt
Resource
win7-20230712-en
Behavioral task
behavioral24
Sample
Shotgun.King.The.Final.Checkmate.v1.37/Shotgun.King.The.Final.Checkmate.v1.37/lang/russian.txt
Resource
win10v2004-20230703-en
Behavioral task
behavioral25
Sample
Shotgun.King.The.Final.Checkmate.v1.37/Shotgun.King.The.Final.Checkmate.v1.37/lang/spanish.txt
Resource
win7-20230712-en
Behavioral task
behavioral26
Sample
Shotgun.King.The.Final.Checkmate.v1.37/Shotgun.King.The.Final.Checkmate.v1.37/lang/spanish.txt
Resource
win10v2004-20230703-en
Behavioral task
behavioral27
Sample
Shotgun.King.The.Final.Checkmate.v1.37/Shotgun.King.The.Final.Checkmate.v1.37/lang/ukrainian.txt
Resource
win7-20230712-en
Behavioral task
behavioral28
Sample
Shotgun.King.The.Final.Checkmate.v1.37/Shotgun.King.The.Final.Checkmate.v1.37/lang/ukrainian.txt
Resource
win10v2004-20230703-en
Behavioral task
behavioral29
Sample
Shotgun.King.The.Final.Checkmate.v1.37/Shotgun.King.The.Final.Checkmate.v1.37/play Shotgun King.bat
Resource
win7-20230712-en
Behavioral task
behavioral30
Sample
Shotgun.King.The.Final.Checkmate.v1.37/Shotgun.King.The.Final.Checkmate.v1.37/play Shotgun King.bat
Resource
win10v2004-20230703-en
Behavioral task
behavioral31
Sample
Shotgun.King.The.Final.Checkmate.v1.37/Shotgun.King.The.Final.Checkmate.v1.37/shaderless mode - no CRT.bat
Resource
win7-20230712-en
Behavioral task
behavioral32
Sample
Shotgun.King.The.Final.Checkmate.v1.37/Shotgun.King.The.Final.Checkmate.v1.37/shaderless mode - no CRT.bat
Resource
win10v2004-20230703-en
General
-
Target
Shotgun.King.The.Final.Checkmate.v1.37/Shotgun.King.The.Final.Checkmate.v1.37/data.sgr
-
Size
58.1MB
-
MD5
b2de32ac8e238cd01a7eebbd75874822
-
SHA1
33adf33b6bad9e0fd4604b9466ab01471ad3d94f
-
SHA256
cf554d88260294456878ae18be95ae55b01b03452709ca0c695098e09621f524
-
SHA512
1ab9980f14ca90a1fef83b090d46b4f6a0c596319dfb112412785ddc10a6446ad60605e28999a32492e380a5f514b27a4f21e468cb250a82ee67e62ac9686c12
-
SSDEEP
1572864:uqa22/GzJVKUTczxgTJlf+xyuXbnGCGvDaeP:AUVNTyOTGryjvDvP
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-618519468-4027732583-1827558364-1000_Classes\Local Settings OpenWith.exe Key created \REGISTRY\USER\S-1-5-21-618519468-4027732583-1827558364-1000_Classes\Local Settings cmd.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 3032 OpenWith.exe
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\Shotgun.King.The.Final.Checkmate.v1.37\Shotgun.King.The.Final.Checkmate.v1.37\data.sgr1⤵
- Modifies registry class
PID:4992
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:3032