Analysis
-
max time kernel
90s -
max time network
111s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
15-02-2023 05:19
Behavioral task
behavioral1
Sample
2023-02-14_bec69f85ae254530d57f34bd7abdae7d_kovter.exe
Resource
win7-20220901-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2023-02-14_bec69f85ae254530d57f34bd7abdae7d_kovter.exe
Resource
win10v2004-20220812-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
2023-02-14_bec69f85ae254530d57f34bd7abdae7d_kovter.exe
-
Size
1.1MB
-
MD5
bec69f85ae254530d57f34bd7abdae7d
-
SHA1
9b7e1d518581a0d94a309f65aa56f7d532e830fd
-
SHA256
86f69797168381c12c2f6d14edd284dc819ad7f49c49796b3a46d322d2bb66d1
-
SHA512
e5db64a2154702d5667c479f49ef4df7d96688cf10e802c2593b87b6e42992879ed7d23d4859fcfe3c0ac52f615733151dbc455a5388cc592333f627deacccab
-
SSDEEP
12288:ZGAmvFc/53rqqGgJPXFfPLaAjRui47xLHGKdFPH3h/H6U7W:ZCg53GqTPXtPeAVuiIxLmKPPH3paUS
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 2804 1488 WerFault.exe 2023-02-14_bec69f85ae254530d57f34bd7abdae7d_kovter.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2023-02-14_bec69f85ae254530d57f34bd7abdae7d_kovter.exe"C:\Users\Admin\AppData\Local\Temp\2023-02-14_bec69f85ae254530d57f34bd7abdae7d_kovter.exe"1⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1488 -s 2162⤵
- Program crash
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1488 -ip 14881⤵