391d5f01ad872ac8d62718eefc1a58ca25165d814cf25114444ce85900630647

Analysis

max time kernel
151s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
09-03-2023 14:50

Target

2023-03-08_90d67ccc251626a3481e370fcac0a153_kovter.exe
Size

362KB
MD5

90d67ccc251626a3481e370fcac0a153
SHA1

a7772f7aa40cbc52bf04208d74e05a4c05214ff6
SHA256

391d5f01ad872ac8d62718eefc1a58ca25165d814cf25114444ce85900630647
SHA512

06f7002b661039fa4f2b8bedfaad4192d4d735d13155b647ba3e83e86ddad12393099b5285d6f4a7a6d1da753210ffa2a8f79f152088dae9058793ce6f0b91d2
SSDEEP

6144:ooo350uIdY9sTVekrt4ruS6EPwo9qilsHmmTNMCVN/sfMPqVQhqQ5N:voJ0jaiTptlo9uHhsfMyV/k

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

1504 3476 WerFault.exe 2023-03-08_90d67ccc251626a3481e370fcac0a153_kovter.exe

pid	pid_target	process	target process
1504	3476	WerFault.exe	2023-03-08_90d67ccc251626a3481e370fcac0a153_kovter.exe

C:\Users\Admin\AppData\Local\Temp\2023-03-08_90d67ccc251626a3481e370fcac0a153_kovter.exe
"C:\Users\Admin\AppData\Local\Temp\2023-03-08_90d67ccc251626a3481e370fcac0a153_kovter.exe"
1⤵
PID:3476

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 3476 -s 192
2⤵
- Program crash
PID:1504

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 3476 -ip 3476
1⤵
PID:4928