Analysis
-
max time kernel
148s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
01-04-2023 16:15
Static task
static1
Behavioral task
behavioral1
Sample
Age of Empires IV Trainer Setup.exe
Resource
win7-20230220-en
windows7-x64
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
Age of Empires IV Trainer Setup.exe
Resource
win10v2004-20230220-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
Age of Empires IV Trainer Setup.exe
-
Size
141KB
-
MD5
7ae2ebcfbce6940178cefc78c8d2d87d
-
SHA1
b9f87b7ce80bc453917dd961a332efc848b39a4f
-
SHA256
82abc44418e6ca1f23b1ac2792f1cc526e796519a7d8efcd532aaa32eff8f5bf
-
SHA512
0df3999417dec1e9f0cad24093782ce6dc627fc9b70519ec69b8ffec475f69186816dfadefe9571da26d58d6e2a70842a8f604a416e85fc7f936a18eefa4776f
-
SSDEEP
3072:Bojm4ILlCI+4COHCyhaEtHZkOpk97oc4ILlCI+4TOHHSafx:Bd+bwaEtHLhiHt
Score
1/10
Malware Config
Signatures
-
Processes:
Age of Empires IV Trainer Setup.exedescription ioc process Set value (int) \REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000\SOFTWARE\Microsoft\Internet Explorer\DOMStorage\Total\ = "35" Age of Empires IV Trainer Setup.exe Key created \REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000\Software\Microsoft\Internet Explorer\DOMStorage\api.wemod.com Age of Empires IV Trainer Setup.exe Set value (int) \REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000\SOFTWARE\Microsoft\Internet Explorer\DOMStorage\api.wemod.com\ = "35" Age of Empires IV Trainer Setup.exe Key created \REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000\Software\Microsoft\Internet Explorer\DOMStorage\wemod.com Age of Empires IV Trainer Setup.exe Key created \REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000\SOFTWARE\Microsoft\Internet Explorer\DOMStorage Age of Empires IV Trainer Setup.exe Key created \REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000\SOFTWARE\Microsoft\Internet Explorer\DOMStorage\wemod.com Age of Empires IV Trainer Setup.exe Key created \REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total Age of Empires IV Trainer Setup.exe Set value (int) \REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000\SOFTWARE\Microsoft\Internet Explorer\DOMStorage\wemod.com\NumberOfSubdomains = "1" Age of Empires IV Trainer Setup.exe Set value (int) \REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000\SOFTWARE\Microsoft\Internet Explorer\DOMStorage\wemod.com\Total = "35" Age of Empires IV Trainer Setup.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
Processes:
Age of Empires IV Trainer Setup.exepid process 4392 Age of Empires IV Trainer Setup.exe 4392 Age of Empires IV Trainer Setup.exe
Processes
Network
MITRE ATT&CK Matrix ATT&CK v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/4392-133-0x00000172F9470000-0x00000172F9496000-memory.dmpFilesize
152KB
-
memory/4392-134-0x00000172FC690000-0x00000172FC6A0000-memory.dmpFilesize
64KB
-
memory/4392-135-0x00000172FC690000-0x00000172FC6A0000-memory.dmpFilesize
64KB
-
memory/4392-136-0x00000172FC690000-0x00000172FC6A0000-memory.dmpFilesize
64KB
-
memory/4392-137-0x00000172FC690000-0x00000172FC6A0000-memory.dmpFilesize
64KB
-
memory/4392-138-0x00000172FC690000-0x00000172FC6A0000-memory.dmpFilesize
64KB
-
memory/4392-176-0x0000017B007B0000-0x0000017B00F56000-memory.dmpFilesize
7.6MB
-
memory/4392-180-0x00000172FC690000-0x00000172FC6A0000-memory.dmpFilesize
64KB
-
memory/4392-181-0x00000172FC690000-0x00000172FC6A0000-memory.dmpFilesize
64KB
-
memory/4392-182-0x00000172FC690000-0x00000172FC6A0000-memory.dmpFilesize
64KB
-
memory/4392-183-0x00000172FC690000-0x00000172FC6A0000-memory.dmpFilesize
64KB