Analysis
-
max time kernel
150s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system -
submitted
12-08-2023 11:03
Behavioral task
behavioral1
Sample
Baldurs Gate 3 Early Access Plus 15 Trainer Updated 2021.10.18.exe
Resource
win7-20230712-en
windows7-x64
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
Baldurs Gate 3 Early Access Plus 15 Trainer Updated 2021.10.18.exe
Resource
win10v2004-20230703-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral3
Sample
游侠网最新单机游戏.url
Resource
win7-20230712-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
游侠网最新单机游戏.url
Resource
win10v2004-20230703-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral5
Sample
游侠网热门MOD补丁.url
Resource
win7-20230712-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
游侠网热门MOD补丁.url
Resource
win10v2004-20230703-en
windows10-2004-x64
0 signatures
150 seconds
General
-
Target
Baldurs Gate 3 Early Access Plus 15 Trainer Updated 2021.10.18.exe
-
Size
1.1MB
-
MD5
353c31968d50b68479ebafea2c17029e
-
SHA1
3388414797a3240b98bc950af62161a1e0330206
-
SHA256
e97617802dd6b284e55f1bde9022d69718c4ccb13f7ba77c31463cd6965c623f
-
SHA512
b8d6574cd5e2c1348cb4cd448ccd60fcc29ce6ac960da9057a5baeb1329cc92e44308a123eec22dd7f0fced1903e16299fb0322808e3b572fc610eca254fce70
-
SSDEEP
12288:+H69eFDCwG/sFcMaRQ0om9pmxb7hzulJ4r1VRinKrDAPJRdgMmmurL5DSyt70Ylb:o66dG/sFcMaRNL9Y5kicVbJ7UDSBx
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 840 Baldurs Gate 3 Early Access Plus 15 Trainer Updated 2021.10.18.exe 840 Baldurs Gate 3 Early Access Plus 15 Trainer Updated 2021.10.18.exe 840 Baldurs Gate 3 Early Access Plus 15 Trainer Updated 2021.10.18.exe 840 Baldurs Gate 3 Early Access Plus 15 Trainer Updated 2021.10.18.exe 840 Baldurs Gate 3 Early Access Plus 15 Trainer Updated 2021.10.18.exe 840 Baldurs Gate 3 Early Access Plus 15 Trainer Updated 2021.10.18.exe 840 Baldurs Gate 3 Early Access Plus 15 Trainer Updated 2021.10.18.exe 840 Baldurs Gate 3 Early Access Plus 15 Trainer Updated 2021.10.18.exe 840 Baldurs Gate 3 Early Access Plus 15 Trainer Updated 2021.10.18.exe 840 Baldurs Gate 3 Early Access Plus 15 Trainer Updated 2021.10.18.exe 840 Baldurs Gate 3 Early Access Plus 15 Trainer Updated 2021.10.18.exe 840 Baldurs Gate 3 Early Access Plus 15 Trainer Updated 2021.10.18.exe 840 Baldurs Gate 3 Early Access Plus 15 Trainer Updated 2021.10.18.exe 840 Baldurs Gate 3 Early Access Plus 15 Trainer Updated 2021.10.18.exe 840 Baldurs Gate 3 Early Access Plus 15 Trainer Updated 2021.10.18.exe 840 Baldurs Gate 3 Early Access Plus 15 Trainer Updated 2021.10.18.exe 840 Baldurs Gate 3 Early Access Plus 15 Trainer Updated 2021.10.18.exe 840 Baldurs Gate 3 Early Access Plus 15 Trainer Updated 2021.10.18.exe 840 Baldurs Gate 3 Early Access Plus 15 Trainer Updated 2021.10.18.exe 840 Baldurs Gate 3 Early Access Plus 15 Trainer Updated 2021.10.18.exe 840 Baldurs Gate 3 Early Access Plus 15 Trainer Updated 2021.10.18.exe 840 Baldurs Gate 3 Early Access Plus 15 Trainer Updated 2021.10.18.exe 840 Baldurs Gate 3 Early Access Plus 15 Trainer Updated 2021.10.18.exe 840 Baldurs Gate 3 Early Access Plus 15 Trainer Updated 2021.10.18.exe 840 Baldurs Gate 3 Early Access Plus 15 Trainer Updated 2021.10.18.exe 840 Baldurs Gate 3 Early Access Plus 15 Trainer Updated 2021.10.18.exe 840 Baldurs Gate 3 Early Access Plus 15 Trainer Updated 2021.10.18.exe 840 Baldurs Gate 3 Early Access Plus 15 Trainer Updated 2021.10.18.exe 840 Baldurs Gate 3 Early Access Plus 15 Trainer Updated 2021.10.18.exe 840 Baldurs Gate 3 Early Access Plus 15 Trainer Updated 2021.10.18.exe 840 Baldurs Gate 3 Early Access Plus 15 Trainer Updated 2021.10.18.exe 840 Baldurs Gate 3 Early Access Plus 15 Trainer Updated 2021.10.18.exe 840 Baldurs Gate 3 Early Access Plus 15 Trainer Updated 2021.10.18.exe 840 Baldurs Gate 3 Early Access Plus 15 Trainer Updated 2021.10.18.exe 840 Baldurs Gate 3 Early Access Plus 15 Trainer Updated 2021.10.18.exe 840 Baldurs Gate 3 Early Access Plus 15 Trainer Updated 2021.10.18.exe 840 Baldurs Gate 3 Early Access Plus 15 Trainer Updated 2021.10.18.exe 840 Baldurs Gate 3 Early Access Plus 15 Trainer Updated 2021.10.18.exe 840 Baldurs Gate 3 Early Access Plus 15 Trainer Updated 2021.10.18.exe 840 Baldurs Gate 3 Early Access Plus 15 Trainer Updated 2021.10.18.exe 840 Baldurs Gate 3 Early Access Plus 15 Trainer Updated 2021.10.18.exe 840 Baldurs Gate 3 Early Access Plus 15 Trainer Updated 2021.10.18.exe 840 Baldurs Gate 3 Early Access Plus 15 Trainer Updated 2021.10.18.exe 840 Baldurs Gate 3 Early Access Plus 15 Trainer Updated 2021.10.18.exe 840 Baldurs Gate 3 Early Access Plus 15 Trainer Updated 2021.10.18.exe 840 Baldurs Gate 3 Early Access Plus 15 Trainer Updated 2021.10.18.exe 840 Baldurs Gate 3 Early Access Plus 15 Trainer Updated 2021.10.18.exe 840 Baldurs Gate 3 Early Access Plus 15 Trainer Updated 2021.10.18.exe 840 Baldurs Gate 3 Early Access Plus 15 Trainer Updated 2021.10.18.exe 840 Baldurs Gate 3 Early Access Plus 15 Trainer Updated 2021.10.18.exe 840 Baldurs Gate 3 Early Access Plus 15 Trainer Updated 2021.10.18.exe 840 Baldurs Gate 3 Early Access Plus 15 Trainer Updated 2021.10.18.exe 840 Baldurs Gate 3 Early Access Plus 15 Trainer Updated 2021.10.18.exe 840 Baldurs Gate 3 Early Access Plus 15 Trainer Updated 2021.10.18.exe 840 Baldurs Gate 3 Early Access Plus 15 Trainer Updated 2021.10.18.exe 840 Baldurs Gate 3 Early Access Plus 15 Trainer Updated 2021.10.18.exe 840 Baldurs Gate 3 Early Access Plus 15 Trainer Updated 2021.10.18.exe 840 Baldurs Gate 3 Early Access Plus 15 Trainer Updated 2021.10.18.exe 840 Baldurs Gate 3 Early Access Plus 15 Trainer Updated 2021.10.18.exe 840 Baldurs Gate 3 Early Access Plus 15 Trainer Updated 2021.10.18.exe 840 Baldurs Gate 3 Early Access Plus 15 Trainer Updated 2021.10.18.exe 840 Baldurs Gate 3 Early Access Plus 15 Trainer Updated 2021.10.18.exe 840 Baldurs Gate 3 Early Access Plus 15 Trainer Updated 2021.10.18.exe 840 Baldurs Gate 3 Early Access Plus 15 Trainer Updated 2021.10.18.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 840 Baldurs Gate 3 Early Access Plus 15 Trainer Updated 2021.10.18.exe