Analysis
-
max time kernel
150s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20230712-en -
resource tags
-
submitted
10-08-2023 14:27
General
-
Target
Baldurs Gate 3 v4.1.1 Plus 14 Trainer.exe
-
Size
1.7MB
-
MD5
fbc603ac06fd22574c2c3c5ffaf3a813
-
SHA1
decfc2253e25bb5e267c8fdeca986c21da55940c
-
SHA256
8ad7d3eeaf4b8271246719b0e548c3e261b00b5dd9bf66ae8f170f7caecbfe9a
-
SHA512
cba68c96edec52396bda0112ccc510d01c9c933a7af9d865872b98a5cf2d2954c3dc955ee2a5871cadec66ffd08a03cd106d08e172bd6db4314bf1544cac9126
-
SSDEEP
24576:Tr2BMB027PcmYfOcccMTJ4Gk9v34o7CnG3ICjB5nkTikoUPMMDSVXT5XbyFPPoya:Tr2yqP4o7uG37choUkhXT5Xoo1
Malware Config
Signatures
-
Modifies system certificate store 2 TTPs 6 IoCs
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Baldurs Gate 3 v4.1.1 Plus 14 Trainer.exe"C:\Users\Admin\AppData\Local\Temp\Baldurs Gate 3 v4.1.1 Plus 14 Trainer.exe"1⤵
- Modifies system certificate store
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
344B
MD5e66108a9d12d0d183fae84cae18a0f42
SHA1994ab08d648a380c71c882ba849dddeb7b577b5a
SHA256a5bcc600bc96bd2e1755d13cc2a28c1bd0cf27da4eabb19e50c39049f1114386
SHA5126f0d7756030e87852b5f7f89efb1c394596555f84a6a5caf5816dc791390e5fd01d972dd118cb1711d4634e688ae62a514c1dba16e4a4bf4e4a77b74577659f5
-
Filesize
344B
MD5fb4e694ab7493710827f3014b37d9860
SHA1f3c8e395119f8f80ed411c59315a91617c2bf89a
SHA25653d897185ac11e9171fab6c73afdde38e497a45baf5b74daaac764062fede8d3
SHA512288e75869f047320757f09cbc6b7357f0b193dc7d85a600e5bb0fbc1b77d3424b48fa76e4d2679aa5c4eb7f4b9161089f73ec0882161586b141807411d4abe53
-
Filesize
62KB
MD53ac860860707baaf32469fa7cc7c0192
SHA1c33c2acdaba0e6fa41fd2f00f186804722477639
SHA256d015145d551ecd14916270efad773bbc9fd57fad2228d2c24559f696c961d904
SHA512d62ad2408c969a95550fb87efda50f988770ba5e39972041bf85924275baf156b8bec309ecc6409e5acdd37ec175dea40eff921ab58933b5b5b5d35a6147567c
-
Filesize
164KB
MD54ff65ad929cd9a367680e0e5b1c08166
SHA1c0af0d4396bd1f15c45f39d3b849ba444233b3a2
SHA256c8733c93cc5aaf5ca206d06af22ee8dbdec764fb5085019a6a9181feb9dfdee6
SHA512f530dc0d024a5a3b8903ffaaa41b608a5ccdd6da4ba1949f2c2e55a9fca475fec5c8d2119b5763cabe7ef1c3788fb9dcac621869db51d65b1d83cfe404fb4c27
-
Filesize
512KB
-
Filesize
9.9MB
-
Filesize
512KB
-
Filesize
40KB
-
Filesize
40KB
-
Filesize
512KB
-
Filesize
512KB
-
Filesize
512KB
-
Filesize
512KB
-
Filesize
208KB
-
Filesize
9.9MB
-
Filesize
208KB
-
Filesize
512KB
-
Filesize
512KB
-
Filesize
512KB
-
Filesize
512KB
-
Filesize
40KB
-
Filesize
40KB
-
Filesize
512KB