Analysis

  • max time kernel
    292s
  • max time network
    311s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230703-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
  • submitted
    01/08/2023, 06:51

General

  • Target

    Shotgun.King.The.Final.Checkmate.v1.37/Shotgun.King.The.Final.Checkmate.v1.37/shaderless mode - no CRT.bat

  • Size

    33B

  • MD5

    4bd519b746426cc185d3c4a5b846b4d3

  • SHA1

    70b0193ac4acdfa9088346b00d70a20c4e236449

  • SHA256

    72f82466f09e7d78fa419e850fcb3c4c740139926d7d30c52d8dd0df6667b09e

  • SHA512

    7bc5a616eaf4059d2b416592bd7e6025f00089eee856a15f06ec64d28f3ad83dc6f74dee36c25c0647f24a16f953febdcd12bc755e47d75300df826a2916b214

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Windows\system32\cmd.exe
    C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Shotgun.King.The.Final.Checkmate.v1.37\Shotgun.King.The.Final.Checkmate.v1.37\shaderless mode - no CRT.bat"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:4376
    • C:\Users\Admin\AppData\Local\Temp\Shotgun.King.The.Final.Checkmate.v1.37\Shotgun.King.The.Final.Checkmate.v1.37\shotgun_king.exe
      shotgun_king.exe shaderless
      2⤵
      • Suspicious use of SetWindowsHookEx
      PID:4396
  • C:\Windows\system32\AUDIODG.EXE
    C:\Windows\system32\AUDIODG.EXE 0x4f4 0x2ec
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:3224

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4396-133-0x00000000FFD90000-0x00000000FFDA0000-memory.dmp

    Filesize

    64KB

  • memory/4396-135-0x00000000FFD90000-0x00000000FFDA0000-memory.dmp

    Filesize

    64KB

  • memory/4396-136-0x00000000FFD90000-0x00000000FFDA0000-memory.dmp

    Filesize

    64KB

  • memory/4396-142-0x00000000FFD90000-0x00000000FFDA0000-memory.dmp

    Filesize

    64KB

  • memory/4396-143-0x00000000FFD90000-0x00000000FFDA0000-memory.dmp

    Filesize

    64KB

  • memory/4396-144-0x00000000FFD90000-0x00000000FFDA0000-memory.dmp

    Filesize

    64KB

  • memory/4396-145-0x00000000FFD90000-0x00000000FFDA0000-memory.dmp

    Filesize

    64KB

  • memory/4396-147-0x00000000FFD90000-0x00000000FFDA0000-memory.dmp

    Filesize

    64KB

  • memory/4396-148-0x00000000FFD90000-0x00000000FFDA0000-memory.dmp

    Filesize

    64KB

  • memory/4396-149-0x00000000FFD90000-0x00000000FFDA0000-memory.dmp

    Filesize

    64KB

  • memory/4396-150-0x00000000FFD90000-0x00000000FFDA0000-memory.dmp

    Filesize

    64KB

  • memory/4396-153-0x00000000FFD90000-0x00000000FFDA0000-memory.dmp

    Filesize

    64KB

  • memory/4396-155-0x00000000FFD90000-0x00000000FFDA0000-memory.dmp

    Filesize

    64KB

  • memory/4396-156-0x00000000FFD90000-0x00000000FFDA0000-memory.dmp

    Filesize

    64KB

  • memory/4396-157-0x00000000FFD90000-0x00000000FFDA0000-memory.dmp

    Filesize

    64KB

  • memory/4396-158-0x00000000FFD90000-0x00000000FFDA0000-memory.dmp

    Filesize

    64KB

  • memory/4396-161-0x00000000FFD90000-0x00000000FFDA0000-memory.dmp

    Filesize

    64KB

  • memory/4396-160-0x00000000FFD90000-0x00000000FFDA0000-memory.dmp

    Filesize

    64KB

  • memory/4396-159-0x00000000FFD90000-0x00000000FFDA0000-memory.dmp

    Filesize

    64KB

  • memory/4396-154-0x00000000FFD90000-0x00000000FFDA0000-memory.dmp

    Filesize

    64KB

  • memory/4396-152-0x00000000FFD90000-0x00000000FFDA0000-memory.dmp

    Filesize

    64KB

  • memory/4396-151-0x00000000FFD90000-0x00000000FFDA0000-memory.dmp

    Filesize

    64KB

  • memory/4396-146-0x00000000FFD90000-0x00000000FFDA0000-memory.dmp

    Filesize

    64KB

  • memory/4396-141-0x00000000FFD90000-0x00000000FFDA0000-memory.dmp

    Filesize

    64KB

  • memory/4396-140-0x00000000FFD90000-0x00000000FFDA0000-memory.dmp

    Filesize

    64KB

  • memory/4396-139-0x00000000FFD90000-0x00000000FFDA0000-memory.dmp

    Filesize

    64KB

  • memory/4396-138-0x00000000FFD90000-0x00000000FFDA0000-memory.dmp

    Filesize

    64KB

  • memory/4396-137-0x00000000FFD90000-0x00000000FFDA0000-memory.dmp

    Filesize

    64KB

  • memory/4396-134-0x00000000FFD90000-0x00000000FFDA0000-memory.dmp

    Filesize

    64KB

  • memory/4396-163-0x00000000FFD90000-0x00000000FFDA0000-memory.dmp

    Filesize

    64KB

  • memory/4396-162-0x00000000FFD90000-0x00000000FFDA0000-memory.dmp

    Filesize

    64KB

  • memory/4396-164-0x00000000FFD90000-0x00000000FFDA0000-memory.dmp

    Filesize

    64KB

  • memory/4396-166-0x00000000FFD90000-0x00000000FFDA0000-memory.dmp

    Filesize

    64KB

  • memory/4396-165-0x00000000FFD90000-0x00000000FFDA0000-memory.dmp

    Filesize

    64KB

  • memory/4396-167-0x00000000FFD90000-0x00000000FFDA0000-memory.dmp

    Filesize

    64KB

  • memory/4396-168-0x00000000FFD90000-0x00000000FFDA0000-memory.dmp

    Filesize

    64KB

  • memory/4396-170-0x00000000FFD90000-0x00000000FFDA0000-memory.dmp

    Filesize

    64KB

  • memory/4396-169-0x00000000FFD90000-0x00000000FFDA0000-memory.dmp

    Filesize

    64KB

  • memory/4396-171-0x00000000FFD90000-0x00000000FFDA0000-memory.dmp

    Filesize

    64KB

  • memory/4396-178-0x00000000FFD90000-0x00000000FFDA0000-memory.dmp

    Filesize

    64KB

  • memory/4396-177-0x00000000FFD90000-0x00000000FFDA0000-memory.dmp

    Filesize

    64KB

  • memory/4396-176-0x00000000FFD90000-0x00000000FFDA0000-memory.dmp

    Filesize

    64KB

  • memory/4396-175-0x00000000FFD90000-0x00000000FFDA0000-memory.dmp

    Filesize

    64KB

  • memory/4396-174-0x00000000FFD90000-0x00000000FFDA0000-memory.dmp

    Filesize

    64KB

  • memory/4396-173-0x00000000FFD90000-0x00000000FFDA0000-memory.dmp

    Filesize

    64KB

  • memory/4396-172-0x00000000FFD90000-0x00000000FFDA0000-memory.dmp

    Filesize

    64KB

  • memory/4396-181-0x0000000000400000-0x0000000000B4C000-memory.dmp

    Filesize

    7.3MB

  • memory/4396-182-0x0000000074F40000-0x000000007513B000-memory.dmp

    Filesize

    2.0MB

  • memory/4396-183-0x00000000FFD90000-0x00000000FFDA0000-memory.dmp

    Filesize

    64KB

  • memory/4396-184-0x00000000FFD90000-0x00000000FFDA0000-memory.dmp

    Filesize

    64KB

  • memory/4396-185-0x00000000FFD90000-0x00000000FFDA0000-memory.dmp

    Filesize

    64KB

  • memory/4396-190-0x00000000FFD90000-0x00000000FFDA0000-memory.dmp

    Filesize

    64KB

  • memory/4396-191-0x00000000FFD90000-0x00000000FFDA0000-memory.dmp

    Filesize

    64KB

  • memory/4396-192-0x00000000FFD90000-0x00000000FFDA0000-memory.dmp

    Filesize

    64KB

  • memory/4396-193-0x00000000FFD90000-0x00000000FFDA0000-memory.dmp

    Filesize

    64KB

  • memory/4396-194-0x00000000FFD90000-0x00000000FFDA0000-memory.dmp

    Filesize

    64KB

  • memory/4396-195-0x00000000FFD90000-0x00000000FFDA0000-memory.dmp

    Filesize

    64KB

  • memory/4396-196-0x00000000FFD90000-0x00000000FFDA0000-memory.dmp

    Filesize

    64KB

  • memory/4396-197-0x00000000FFD90000-0x00000000FFDA0000-memory.dmp

    Filesize

    64KB

  • memory/4396-198-0x00000000FFD90000-0x00000000FFDA0000-memory.dmp

    Filesize

    64KB

  • memory/4396-199-0x00000000FFD90000-0x00000000FFDA0000-memory.dmp

    Filesize

    64KB

  • memory/4396-200-0x00000000FFD90000-0x00000000FFDA0000-memory.dmp

    Filesize

    64KB

  • memory/4396-201-0x00000000FFD90000-0x00000000FFDA0000-memory.dmp

    Filesize

    64KB

  • memory/4396-202-0x00000000FFD90000-0x00000000FFDA0000-memory.dmp

    Filesize

    64KB