Analysis
-
max time kernel
150s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
-
submitted
26-12-2023 09:47
General
-
Target
Baldurs Gate 3 v4.1.1 Plus 21 Trainer Updated 2023.12.01.exe
-
Size
1.7MB
-
MD5
85fba30ac904c4d99e3f7e355eb00969
-
SHA1
1535a6371eba36aab9f7a996ef6062470af7f47d
-
SHA256
a55785a92318115545cb0e3131958994c6c4f301becaaee3050d85e212f5c332
-
SHA512
2ceb5d22ec6717c9c89cd1edf116565d307d0ad65dd5dd7956902c62c091a3d211dc275c552599a3d35c199bb1d5c7ec1655a6ce8012c30d20b0cb2fdcb06892
-
SSDEEP
24576:rwCcpAmiqHyDUU4+h0bz4iFjBUjkkE3dawlDSVXT5XUsjya:rEpACyDd4+h0n4yU71XT5XL1
Malware Config
Signatures
-
Modifies system certificate store 2 TTPs 6 IoCs
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Baldurs Gate 3 v4.1.1 Plus 21 Trainer Updated 2023.12.01.exe"C:\Users\Admin\AppData\Local\Temp\Baldurs Gate 3 v4.1.1 Plus 21 Trainer Updated 2023.12.01.exe"1⤵
- Modifies system certificate store
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
65KB
MD5ac05d27423a85adc1622c714f2cb6184
SHA1b0fe2b1abddb97837ea0195be70ab2ff14d43198
SHA256c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
SHA5126d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d
-
Filesize
1KB
MD5a266bb7dcc38a562631361bbf61dd11b
SHA13b1efd3a66ea28b16697394703a72ca340a05bd5
SHA256df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e
SHA5120da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc
-
Filesize
344B
MD569ac5c6fbd3bb8f08ec5fbc21b9446c5
SHA151292390b95efa097f0ccddee625ba1e30cb000e
SHA2566fb6fbc7a67685b897228c7f422f73fe9eb04e5a36a27a5fbe92381f017aa82c
SHA512cb9eee0a54963adda1313bc5c45645b9f6293780cd4d5fe17a92dc1a5413cbd36784c052d9b0e091effba85402ff4f5c61cccc5104cceff3d2ed05508835b3c5
-
Filesize
242B
MD5bbd28c9799dd53d435c8a1cfb3bc7983
SHA101bf32534a7f6cb5f5fbe12735874704360cea4b
SHA256e34cccd707f89c0ffa7ebc46e2f582b93630e33cc34630e04b3c1854b3d8a750
SHA5120da4960fa1151a5a97a6d7518689c6c0e03141609374f6d7659fdc15256e1a1efb742d3c4dacec323c2942a887c8e845c19882cef4f85e87c3c9a6328ec9c434
-
Filesize
512KB
-
Filesize
40KB
-
Filesize
40KB
-
Filesize
512KB
-
Filesize
512KB
-
Filesize
208KB
-
Filesize
512KB
-
Filesize
9.9MB
-
Filesize
9.9MB
-
Filesize
40KB
-
Filesize
40KB