Analysis
-
max time kernel
151s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
09-03-2023 14:50
Behavioral task
behavioral1
Sample
2023-03-08_90d67ccc251626a3481e370fcac0a153_kovter.exe
Resource
win7-20230220-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2023-03-08_90d67ccc251626a3481e370fcac0a153_kovter.exe
Resource
win10v2004-20230220-en
1 signatures
150 seconds
General
-
Target
2023-03-08_90d67ccc251626a3481e370fcac0a153_kovter.exe
-
Size
362KB
-
MD5
90d67ccc251626a3481e370fcac0a153
-
SHA1
a7772f7aa40cbc52bf04208d74e05a4c05214ff6
-
SHA256
391d5f01ad872ac8d62718eefc1a58ca25165d814cf25114444ce85900630647
-
SHA512
06f7002b661039fa4f2b8bedfaad4192d4d735d13155b647ba3e83e86ddad12393099b5285d6f4a7a6d1da753210ffa2a8f79f152088dae9058793ce6f0b91d2
-
SSDEEP
6144:ooo350uIdY9sTVekrt4ruS6EPwo9qilsHmmTNMCVN/sfMPqVQhqQ5N:voJ0jaiTptlo9uHhsfMyV/k
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 1504 3476 WerFault.exe 2023-03-08_90d67ccc251626a3481e370fcac0a153_kovter.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2023-03-08_90d67ccc251626a3481e370fcac0a153_kovter.exe"C:\Users\Admin\AppData\Local\Temp\2023-03-08_90d67ccc251626a3481e370fcac0a153_kovter.exe"1⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3476 -s 1922⤵
- Program crash
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 3476 -ip 34761⤵