Analysis
-
max time kernel
150s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20231127-en -
resource tags
arch:x64arch:x86image:win10v2004-20231127-enlocale:en-usos:windows10-2004-x64system -
submitted
11-12-2023 02:34
Behavioral task
behavioral1
Sample
Baldurs Gate 3 v4.1.1 14 Trainer.exe
Resource
win7-20231023-en
windows7-x64
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
Baldurs Gate 3 v4.1.1 14 Trainer.exe
Resource
win10v2004-20231127-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
Baldurs Gate 3 v4.1.1 14 Trainer.exe
-
Size
1.7MB
-
MD5
fbc603ac06fd22574c2c3c5ffaf3a813
-
SHA1
decfc2253e25bb5e267c8fdeca986c21da55940c
-
SHA256
8ad7d3eeaf4b8271246719b0e548c3e261b00b5dd9bf66ae8f170f7caecbfe9a
-
SHA512
cba68c96edec52396bda0112ccc510d01c9c933a7af9d865872b98a5cf2d2954c3dc955ee2a5871cadec66ffd08a03cd106d08e172bd6db4314bf1544cac9126
-
SSDEEP
24576:Tr2BMB027PcmYfOcccMTJ4Gk9v34o7CnG3ICjB5nkTikoUPMMDSVXT5XbyFPPoya:Tr2yqP4o7uG37choUkhXT5Xoo1
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 3748 Baldurs Gate 3 v4.1.1 14 Trainer.exe 3748 Baldurs Gate 3 v4.1.1 14 Trainer.exe 3748 Baldurs Gate 3 v4.1.1 14 Trainer.exe 3748 Baldurs Gate 3 v4.1.1 14 Trainer.exe 3748 Baldurs Gate 3 v4.1.1 14 Trainer.exe 3748 Baldurs Gate 3 v4.1.1 14 Trainer.exe 3748 Baldurs Gate 3 v4.1.1 14 Trainer.exe 3748 Baldurs Gate 3 v4.1.1 14 Trainer.exe 3748 Baldurs Gate 3 v4.1.1 14 Trainer.exe 3748 Baldurs Gate 3 v4.1.1 14 Trainer.exe 3748 Baldurs Gate 3 v4.1.1 14 Trainer.exe 3748 Baldurs Gate 3 v4.1.1 14 Trainer.exe 3748 Baldurs Gate 3 v4.1.1 14 Trainer.exe 3748 Baldurs Gate 3 v4.1.1 14 Trainer.exe 3748 Baldurs Gate 3 v4.1.1 14 Trainer.exe 3748 Baldurs Gate 3 v4.1.1 14 Trainer.exe 3748 Baldurs Gate 3 v4.1.1 14 Trainer.exe 3748 Baldurs Gate 3 v4.1.1 14 Trainer.exe 3748 Baldurs Gate 3 v4.1.1 14 Trainer.exe 3748 Baldurs Gate 3 v4.1.1 14 Trainer.exe 3748 Baldurs Gate 3 v4.1.1 14 Trainer.exe 3748 Baldurs Gate 3 v4.1.1 14 Trainer.exe 3748 Baldurs Gate 3 v4.1.1 14 Trainer.exe 3748 Baldurs Gate 3 v4.1.1 14 Trainer.exe 3748 Baldurs Gate 3 v4.1.1 14 Trainer.exe 3748 Baldurs Gate 3 v4.1.1 14 Trainer.exe 3748 Baldurs Gate 3 v4.1.1 14 Trainer.exe 3748 Baldurs Gate 3 v4.1.1 14 Trainer.exe 3748 Baldurs Gate 3 v4.1.1 14 Trainer.exe 3748 Baldurs Gate 3 v4.1.1 14 Trainer.exe 3748 Baldurs Gate 3 v4.1.1 14 Trainer.exe 3748 Baldurs Gate 3 v4.1.1 14 Trainer.exe 3748 Baldurs Gate 3 v4.1.1 14 Trainer.exe 3748 Baldurs Gate 3 v4.1.1 14 Trainer.exe 3748 Baldurs Gate 3 v4.1.1 14 Trainer.exe 3748 Baldurs Gate 3 v4.1.1 14 Trainer.exe 3748 Baldurs Gate 3 v4.1.1 14 Trainer.exe 3748 Baldurs Gate 3 v4.1.1 14 Trainer.exe 3748 Baldurs Gate 3 v4.1.1 14 Trainer.exe 3748 Baldurs Gate 3 v4.1.1 14 Trainer.exe 3748 Baldurs Gate 3 v4.1.1 14 Trainer.exe 3748 Baldurs Gate 3 v4.1.1 14 Trainer.exe 3748 Baldurs Gate 3 v4.1.1 14 Trainer.exe 3748 Baldurs Gate 3 v4.1.1 14 Trainer.exe 3748 Baldurs Gate 3 v4.1.1 14 Trainer.exe 3748 Baldurs Gate 3 v4.1.1 14 Trainer.exe 3748 Baldurs Gate 3 v4.1.1 14 Trainer.exe 3748 Baldurs Gate 3 v4.1.1 14 Trainer.exe 3748 Baldurs Gate 3 v4.1.1 14 Trainer.exe 3748 Baldurs Gate 3 v4.1.1 14 Trainer.exe 3748 Baldurs Gate 3 v4.1.1 14 Trainer.exe 3748 Baldurs Gate 3 v4.1.1 14 Trainer.exe 3748 Baldurs Gate 3 v4.1.1 14 Trainer.exe 3748 Baldurs Gate 3 v4.1.1 14 Trainer.exe 3748 Baldurs Gate 3 v4.1.1 14 Trainer.exe 3748 Baldurs Gate 3 v4.1.1 14 Trainer.exe 3748 Baldurs Gate 3 v4.1.1 14 Trainer.exe 3748 Baldurs Gate 3 v4.1.1 14 Trainer.exe 3748 Baldurs Gate 3 v4.1.1 14 Trainer.exe 3748 Baldurs Gate 3 v4.1.1 14 Trainer.exe 3748 Baldurs Gate 3 v4.1.1 14 Trainer.exe 3748 Baldurs Gate 3 v4.1.1 14 Trainer.exe 3748 Baldurs Gate 3 v4.1.1 14 Trainer.exe 3748 Baldurs Gate 3 v4.1.1 14 Trainer.exe -
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeDebugPrivilege 3748 Baldurs Gate 3 v4.1.1 14 Trainer.exe Token: SeDebugPrivilege 3748 Baldurs Gate 3 v4.1.1 14 Trainer.exe