Analysis

  • max time kernel
    120s
  • max time network
    135s
  • platform
    windows7_x64
  • resource
    win7-20230712-en
  • resource tags

    arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system
  • submitted
    01-08-2023 06:51

General

  • Target

    Shotgun.King.The.Final.Checkmate.v1.37/Shotgun.King.The.Final.Checkmate.v1.37/shaderless mode - no CRT.bat

  • Size

    33B

  • MD5

    4bd519b746426cc185d3c4a5b846b4d3

  • SHA1

    70b0193ac4acdfa9088346b00d70a20c4e236449

  • SHA256

    72f82466f09e7d78fa419e850fcb3c4c740139926d7d30c52d8dd0df6667b09e

  • SHA512

    7bc5a616eaf4059d2b416592bd7e6025f00089eee856a15f06ec64d28f3ad83dc6f74dee36c25c0647f24a16f953febdcd12bc755e47d75300df826a2916b214

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: CmdExeWriteProcessMemorySpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Windows\system32\cmd.exe
    cmd /c "C:\Users\Admin\AppData\Local\Temp\Shotgun.King.The.Final.Checkmate.v1.37\Shotgun.King.The.Final.Checkmate.v1.37\shaderless mode - no CRT.bat"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2248
    • C:\Users\Admin\AppData\Local\Temp\Shotgun.King.The.Final.Checkmate.v1.37\Shotgun.King.The.Final.Checkmate.v1.37\shotgun_king.exe
      shotgun_king.exe shaderless
      2⤵
      • Suspicious behavior: CmdExeWriteProcessMemorySpam
      • Suspicious use of SetWindowsHookEx
      PID:2920

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2920-58-0x00000000FFEF0000-0x00000000FFF00000-memory.dmp

    Filesize

    64KB

  • memory/2920-61-0x00000000FFEF0000-0x00000000FFF00000-memory.dmp

    Filesize

    64KB

  • memory/2920-66-0x00000000FFEF0000-0x00000000FFF00000-memory.dmp

    Filesize

    64KB

  • memory/2920-70-0x00000000FFEF0000-0x00000000FFF00000-memory.dmp

    Filesize

    64KB

  • memory/2920-74-0x00000000FFEF0000-0x00000000FFF00000-memory.dmp

    Filesize

    64KB

  • memory/2920-75-0x00000000FFEF0000-0x00000000FFF00000-memory.dmp

    Filesize

    64KB

  • memory/2920-80-0x00000000FFEF0000-0x00000000FFF00000-memory.dmp

    Filesize

    64KB

  • memory/2920-82-0x00000000FFEF0000-0x00000000FFF00000-memory.dmp

    Filesize

    64KB

  • memory/2920-83-0x00000000FFEF0000-0x00000000FFF00000-memory.dmp

    Filesize

    64KB

  • memory/2920-81-0x00000000FFEF0000-0x00000000FFF00000-memory.dmp

    Filesize

    64KB

  • memory/2920-79-0x00000000FFEF0000-0x00000000FFF00000-memory.dmp

    Filesize

    64KB

  • memory/2920-78-0x00000000FFEF0000-0x00000000FFF00000-memory.dmp

    Filesize

    64KB

  • memory/2920-77-0x00000000FFEF0000-0x00000000FFF00000-memory.dmp

    Filesize

    64KB

  • memory/2920-76-0x00000000FFEF0000-0x00000000FFF00000-memory.dmp

    Filesize

    64KB

  • memory/2920-73-0x00000000FFEF0000-0x00000000FFF00000-memory.dmp

    Filesize

    64KB

  • memory/2920-72-0x00000000FFEF0000-0x00000000FFF00000-memory.dmp

    Filesize

    64KB

  • memory/2920-71-0x00000000FFEF0000-0x00000000FFF00000-memory.dmp

    Filesize

    64KB

  • memory/2920-69-0x00000000FFEF0000-0x00000000FFF00000-memory.dmp

    Filesize

    64KB

  • memory/2920-68-0x00000000FFEF0000-0x00000000FFF00000-memory.dmp

    Filesize

    64KB

  • memory/2920-67-0x00000000FFEF0000-0x00000000FFF00000-memory.dmp

    Filesize

    64KB

  • memory/2920-65-0x00000000FFEF0000-0x00000000FFF00000-memory.dmp

    Filesize

    64KB

  • memory/2920-64-0x00000000FFEF0000-0x00000000FFF00000-memory.dmp

    Filesize

    64KB

  • memory/2920-63-0x00000000FFEF0000-0x00000000FFF00000-memory.dmp

    Filesize

    64KB

  • memory/2920-62-0x00000000FFEF0000-0x00000000FFF00000-memory.dmp

    Filesize

    64KB

  • memory/2920-60-0x00000000FFEF0000-0x00000000FFF00000-memory.dmp

    Filesize

    64KB

  • memory/2920-59-0x00000000FFEF0000-0x00000000FFF00000-memory.dmp

    Filesize

    64KB

  • memory/2920-56-0x00000000FFEF0000-0x00000000FFF00000-memory.dmp

    Filesize

    64KB

  • memory/2920-57-0x00000000FFEF0000-0x00000000FFF00000-memory.dmp

    Filesize

    64KB

  • memory/2920-54-0x00000000FFEF0000-0x00000000FFF00000-memory.dmp

    Filesize

    64KB

  • memory/2920-55-0x00000000FFEF0000-0x00000000FFF00000-memory.dmp

    Filesize

    64KB

  • memory/2920-85-0x00000000FFEF0000-0x00000000FFF00000-memory.dmp

    Filesize

    64KB

  • memory/2920-84-0x00000000FFEF0000-0x00000000FFF00000-memory.dmp

    Filesize

    64KB

  • memory/2920-86-0x00000000FFEF0000-0x00000000FFF00000-memory.dmp

    Filesize

    64KB

  • memory/2920-88-0x00000000FFEF0000-0x00000000FFF00000-memory.dmp

    Filesize

    64KB

  • memory/2920-87-0x00000000FFEF0000-0x00000000FFF00000-memory.dmp

    Filesize

    64KB

  • memory/2920-89-0x00000000FFEF0000-0x00000000FFF00000-memory.dmp

    Filesize

    64KB

  • memory/2920-91-0x00000000FFEF0000-0x00000000FFF00000-memory.dmp

    Filesize

    64KB

  • memory/2920-90-0x00000000FFEF0000-0x00000000FFF00000-memory.dmp

    Filesize

    64KB

  • memory/2920-92-0x00000000FFEF0000-0x00000000FFF00000-memory.dmp

    Filesize

    64KB

  • memory/2920-93-0x00000000FFEF0000-0x00000000FFF00000-memory.dmp

    Filesize

    64KB

  • memory/2920-94-0x00000000FFEF0000-0x00000000FFF00000-memory.dmp

    Filesize

    64KB

  • memory/2920-95-0x00000000FFEF0000-0x00000000FFF00000-memory.dmp

    Filesize

    64KB

  • memory/2920-97-0x00000000FFEF0000-0x00000000FFF00000-memory.dmp

    Filesize

    64KB

  • memory/2920-100-0x00000000FFEF0000-0x00000000FFF00000-memory.dmp

    Filesize

    64KB

  • memory/2920-99-0x00000000FFEF0000-0x00000000FFF00000-memory.dmp

    Filesize

    64KB

  • memory/2920-98-0x00000000FFEF0000-0x00000000FFF00000-memory.dmp

    Filesize

    64KB

  • memory/2920-96-0x00000000FFEF0000-0x00000000FFF00000-memory.dmp

    Filesize

    64KB

  • memory/2920-103-0x0000000003E00000-0x0000000003E0A000-memory.dmp

    Filesize

    40KB

  • memory/2920-104-0x0000000003E00000-0x0000000003E0A000-memory.dmp

    Filesize

    40KB

  • memory/2920-108-0x0000000000400000-0x0000000000B4C000-memory.dmp

    Filesize

    7.3MB

  • memory/2920-109-0x0000000074FB0000-0x00000000751AB000-memory.dmp

    Filesize

    2.0MB

  • memory/2920-110-0x0000000003E00000-0x0000000003E02000-memory.dmp

    Filesize

    8KB