ba83b8bb4234d477f5bcb33a26ce1fca131b721ae2fc61834cc2c63ebf8fc412 | Triage

Analysis

max time kernel
136s
max time network
182s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
13-03-2023 22:25

Sharing

Report Analysis Logs

General

Target

Filmora9/NLEAuthNUpload.dll
Size

34KB
MD5

86c146bdd788774a1eb8e154dd760afb
SHA1

26b045a1fd9751596296f2abb861d772518affc5
SHA256

bb91ec5e5473d52c921c56f3ff0fee71fda4913bd97c1b7a92c2890801307ecb
SHA512

83ba4ce2ce73a71f610f79cc3df44243b16fe89fbfbf8e6004ab5e4f9d220f8ffacc2a73caec082262c1a9e4951e3d1bd7b41b8b908b06910711bd1b3786b17e
SSDEEP

768:IzlHEeScnhBCAD011c0wGt0T2RtFnwdKkSUE/DToxaiSOAgRT0:IrFBphE/3oUiSOAgu

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2824 3820 WerFault.exe rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\Filmora9\NLEAuthNUpload.dll,#1
1⤵
PID:3820

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -u -p 3820 -s 440
2⤵
- Program crash
PID:2824

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 424 -p 3820 -ip 3820
1⤵
PID:1952

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...