Overview
overview
10Static
static
5ChessBotX(...e).rar
windows10-2004-x64
1ChessBotX(...e).rar
windows11-21h2-x64
1ChessBotX.exe
windows10-2004-x64
10ChessBotX.exe
windows11-21h2-x64
10Installati...ns.txt
windows10-2004-x64
1Installati...ns.txt
windows11-21h2-x64
3License.txt
windows10-2004-x64
1License.txt
windows11-21h2-x64
3Readme.txt
windows10-2004-x64
1Readme.txt
windows11-21h2-x64
3Terms_Of_Use.txt
windows10-2004-x64
1Terms_Of_Use.txt
windows11-21h2-x64
3active_des...64.dll
windows10-2004-x64
8active_des...64.dll
windows11-21h2-x64
8lang/Language.txt
windows10-2004-x64
1lang/Language.txt
windows11-21h2-x64
3lang/chinese.dat
windows10-2004-x64
3lang/chinese.dat
windows11-21h2-x64
3lang/english.dat
windows10-2004-x64
3lang/english.dat
windows11-21h2-x64
3lang/german.dat
windows10-2004-x64
3lang/german.dat
windows11-21h2-x64
3lang/russian.dat
windows10-2004-x64
3lang/russian.dat
windows11-21h2-x64
3lang/spanish.dat
windows10-2004-x64
3lang/spanish.dat
windows11-21h2-x64
3Analysis
- max time kernel
36s - max time network
34s - platform
windows10-2004_x64 - resource
win10v2004-20260130-en - resource tags
arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
16/04/2026, 04:38
Behavioral task
behavioral1
Sample
ChessBotX(Mid_April_Update).rar
Resource
win10v2004-20260130-en
Behavioral task
behavioral2
Sample
ChessBotX(Mid_April_Update).rar
Resource
win11-20260130-en
Behavioral task
behavioral3
Sample
ChessBotX.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral4
Sample
ChessBotX.exe
Resource
win11-20260130-en
Behavioral task
behavioral5
Sample
Installation_Instructions.txt
Resource
win10v2004-20260130-en
Behavioral task
behavioral6
Sample
Installation_Instructions.txt
Resource
win11-20260130-en
Behavioral task
behavioral7
Sample
License.txt
Resource
win10v2004-20260130-en
Behavioral task
behavioral8
Sample
License.txt
Resource
win11-20260130-en
Behavioral task
behavioral9
Sample
Readme.txt
Resource
win10v2004-20260130-en
Behavioral task
behavioral10
Sample
Readme.txt
Resource
win11-20260130-en
Behavioral task
behavioral11
Sample
Terms_Of_Use.txt
Resource
win10v2004-20260130-en
Behavioral task
behavioral12
Sample
Terms_Of_Use.txt
Resource
win11-20260130-en
Behavioral task
behavioral13
Sample
active_desktop_render_x64.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral14
Sample
active_desktop_render_x64.dll
Resource
win11-20260130-en
Behavioral task
behavioral15
Sample
lang/Language.txt
Resource
win10v2004-20260130-en
Behavioral task
behavioral16
Sample
lang/Language.txt
Resource
win11-20260130-en
Behavioral task
behavioral17
Sample
lang/chinese.dat
Resource
win10v2004-20260130-en
Behavioral task
behavioral18
Sample
lang/chinese.dat
Resource
win11-20260130-en
Behavioral task
behavioral19
Sample
lang/english.dat
Resource
win10v2004-20260130-en
Behavioral task
behavioral20
Sample
lang/english.dat
Resource
win11-20260130-en
Behavioral task
behavioral21
Sample
lang/german.dat
Resource
win10v2004-20260130-en
Behavioral task
behavioral22
Sample
lang/german.dat
Resource
win11-20260130-en
Behavioral task
behavioral23
Sample
lang/russian.dat
Resource
win10v2004-20260130-en
Behavioral task
behavioral24
Sample
lang/russian.dat
Resource
win11-20260130-en
Behavioral task
behavioral25
Sample
lang/spanish.dat
Resource
win10v2004-20260130-en
Behavioral task
behavioral26
Sample
lang/spanish.dat
Resource
win11-20260130-en
General
- Target lang/english.dat
- Size 5.2MB
- Sample260416-e9ndeafv2r
- SHA256 0db4bdb72ab911d42ef9a6ed75e6f3ef2240daf0fefd8dd2ee141497a8dbaef8
- MD5 3dca73e463fa49645517a08503d9edce
- SHA1 5f74b42b9959d108653f9665d47b8d321efb3440
- SHA512 5c273a98181a5f7af5813c1ca86c7dfe703c76933449848355009be19f96ff26de57f77de477abe02aa6e8d04bf8538ce05c701c25419ee2dab3470cadbf984d
- SSDEEP 98304:50/lAp2JnUIvKBTo5Lv+ic5cvNJRo5Q8dUoUeX+DhzZw2eadNdM/7WTZmJ:2TqISa5Lq5YNJRo5vU+ODhzZyihZmJ
- TLSH T17A4633AC7CC0B8EB120AE43D906A653253BFF0F54FC57583236AB95F411A92C5CE9879
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Modifies registry class 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-2714754311-527593155-1440850301-1000_Classes\Local Settings OpenWith.exe Key created \REGISTRY\USER\S-1-5-21-2714754311-527593155-1440850301-1000_Classes\Local Settings cmd.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2680 OpenWith.exe