Overview
overview
3Static
static
1Tragamonedas.zip
windows7-x64
1Tragamonedas.zip
windows10-2004-x64
1Tragamoned...ES.exe
windows7-x64
1Tragamoned...ES.exe
windows10-2004-x64
1Tragamoned...10.cfg
windows7-x64
3Tragamoned...10.cfg
windows10-2004-x64
3Tragamoned...lt.cfg
windows7-x64
3Tragamoned...lt.cfg
windows10-2004-x64
3Tragamoned...ty.cfg
windows7-x64
3Tragamoned...ty.cfg
windows10-2004-x64
3Tragamoned...t2.cfg
windows7-x64
3Tragamoned...t2.cfg
windows10-2004-x64
3Tragamoned..._8.cfg
windows7-x64
3Tragamoned..._8.cfg
windows10-2004-x64
3Tragamoned...5a.cfg
windows7-x64
3Tragamoned...5a.cfg
windows10-2004-x64
3Tragamoned..._7.cfg
windows7-x64
3Tragamoned..._7.cfg
windows10-2004-x64
3Tragamoned..._3.cfg
windows7-x64
3Tragamoned..._3.cfg
windows10-2004-x64
3Tragamoned...da.cfg
windows7-x64
3Tragamoned...da.cfg
windows10-2004-x64
3Tragamoned...2b.cfg
windows7-x64
3Tragamoned...2b.cfg
windows10-2004-x64
3Tragamoned...6a.cfg
windows7-x64
3Tragamoned...6a.cfg
windows10-2004-x64
3Tragamoned...2a.cfg
windows7-x64
3Tragamoned...2a.cfg
windows10-2004-x64
3Tragamoned...2d.cfg
windows7-x64
3Tragamoned...2d.cfg
windows10-2004-x64
3Tragamoned..._3.cfg
windows7-x64
3Tragamoned..._3.cfg
windows10-2004-x64
3Analysis
-
max time kernel
153s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-es -
resource tags
arch:x64arch:x86image:win10v2004-20230220-eslocale:es-esos:windows10-2004-x64systemwindows -
submitted
23/04/2023, 00:28
Static task
static1
Behavioral task
behavioral1
Sample
Tragamonedas.zip
Resource
win7-20230220-es
Behavioral task
behavioral2
Sample
Tragamonedas.zip
Resource
win10v2004-20230220-es
Behavioral task
behavioral3
Sample
Tragamonedas/Tragamonedas/SLOT MACHINES.exe
Resource
win7-20230220-es
Behavioral task
behavioral4
Sample
Tragamonedas/Tragamonedas/SLOT MACHINES.exe
Resource
win10v2004-20230220-es
Behavioral task
behavioral5
Sample
Tragamonedas/Tragamonedas/cfg/crzmon_10.cfg
Resource
win7-20230220-es
Behavioral task
behavioral6
Sample
Tragamonedas/Tragamonedas/cfg/crzmon_10.cfg
Resource
win10v2004-20230220-es
Behavioral task
behavioral7
Sample
Tragamonedas/Tragamonedas/cfg/default.cfg
Resource
win7-20230220-es
Behavioral task
behavioral8
Sample
Tragamonedas/Tragamonedas/cfg/default.cfg
Resource
win10v2004-20230220-es
Behavioral task
behavioral9
Sample
Tragamonedas/Tragamonedas/cfg/empty.cfg
Resource
win7-20230220-es
Behavioral task
behavioral10
Sample
Tragamonedas/Tragamonedas/cfg/empty.cfg
Resource
win10v2004-20230220-es
Behavioral task
behavioral11
Sample
Tragamonedas/Tragamonedas/cfg/fcockt2.cfg
Resource
win7-20230220-es
Behavioral task
behavioral12
Sample
Tragamonedas/Tragamonedas/cfg/fcockt2.cfg
Resource
win10v2004-20230221-es
Behavioral task
behavioral13
Sample
Tragamonedas/Tragamonedas/cfg/fcockt_8.cfg
Resource
win7-20230220-es
Behavioral task
behavioral14
Sample
Tragamonedas/Tragamonedas/cfg/fcockt_8.cfg
Resource
win10v2004-20230220-es
Behavioral task
behavioral15
Sample
Tragamonedas/Tragamonedas/cfg/garage_5a.cfg
Resource
win7-20230220-es
Behavioral task
behavioral16
Sample
Tragamonedas/Tragamonedas/cfg/garage_5a.cfg
Resource
win10v2004-20230221-es
Behavioral task
behavioral17
Sample
Tragamonedas/Tragamonedas/cfg/gnome_7.cfg
Resource
win7-20230220-es
Behavioral task
behavioral18
Sample
Tragamonedas/Tragamonedas/cfg/gnome_7.cfg
Resource
win10v2004-20230220-es
Behavioral task
behavioral19
Sample
Tragamonedas/Tragamonedas/cfg/island2_3.cfg
Resource
win7-20230220-es
Behavioral task
behavioral20
Sample
Tragamonedas/Tragamonedas/cfg/island2_3.cfg
Resource
win10v2004-20230220-es
Behavioral task
behavioral21
Sample
Tragamonedas/Tragamonedas/cfg/islanda.cfg
Resource
win7-20230220-es
Behavioral task
behavioral22
Sample
Tragamonedas/Tragamonedas/cfg/islanda.cfg
Resource
win10v2004-20230220-es
Behavioral task
behavioral23
Sample
Tragamonedas/Tragamonedas/cfg/keks_2b.cfg
Resource
win7-20230220-es
Behavioral task
behavioral24
Sample
Tragamonedas/Tragamonedas/cfg/keks_2b.cfg
Resource
win10v2004-20230220-es
Behavioral task
behavioral25
Sample
Tragamonedas/Tragamonedas/cfg/lhaunt_6a.cfg
Resource
win7-20230220-es
Behavioral task
behavioral26
Sample
Tragamonedas/Tragamonedas/cfg/lhaunt_6a.cfg
Resource
win10v2004-20230221-es
Behavioral task
behavioral27
Sample
Tragamonedas/Tragamonedas/cfg/mfish_12a.cfg
Resource
win7-20230220-es
Behavioral task
behavioral28
Sample
Tragamonedas/Tragamonedas/cfg/mfish_12a.cfg
Resource
win10v2004-20230220-es
Behavioral task
behavioral29
Sample
Tragamonedas/Tragamonedas/cfg/pirate2d.cfg
Resource
win7-20230220-es
Behavioral task
behavioral30
Sample
Tragamonedas/Tragamonedas/cfg/pirate2d.cfg
Resource
win10v2004-20230220-es
Behavioral task
behavioral31
Sample
Tragamonedas/Tragamonedas/cfg/pirate_3.cfg
Resource
win7-20230220-es
Behavioral task
behavioral32
Sample
Tragamonedas/Tragamonedas/cfg/pirate_3.cfg
Resource
win10v2004-20230220-es
General
-
Target
Tragamonedas/Tragamonedas/SLOT MACHINES.exe
-
Size
2.3MB
-
MD5
35da9eec80aad8385c251e3079700f3d
-
SHA1
e6336744550b66db2a863293a79ed8df968e3f26
-
SHA256
9d391c8155405cb79b682862dfa55e6000729f5d22a6ffcbc8270eeca3678295
-
SHA512
d14819e05cca095016cf622af5b59b1dc571a601a2003d7a41858956bd320c80fe8ed294d024877f2c73cd3323aaa0de6177fe3dcb10fbf39d5fd54ad52540a6
-
SSDEEP
49152:EXruXLcTQ4aLXffCMp21954IJlP3tlxNCv2nK513blTc:EXruXLcTQ4aLXffCMp219eIbP3tlq2nZ
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 5084 SLOT MACHINES.exe -
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: 33 1128 AUDIODG.EXE Token: SeIncBasePriorityPrivilege 1128 AUDIODG.EXE -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 5084 SLOT MACHINES.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\Tragamonedas\Tragamonedas\SLOT MACHINES.exe"C:\Users\Admin\AppData\Local\Temp\Tragamonedas\Tragamonedas\SLOT MACHINES.exe"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:5084
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x514 0x5081⤵
- Suspicious use of AdjustPrivilegeToken
PID:1128