55c1fe8c4c6adc709a70d0a4e2f2e13a1d396cb2cc6131d53f805bd816ad0169

Analysis

max time kernel
87s
max time network
105s
platform
windows10-2004_x64
resource
win10v2004-20230221-en
resource tags

arch:x64arch:x86image:win10v2004-20230221-enlocale:en-usos:windows10-2004-x64system
submitted
09-03-2023 14:50

Target

2023-03-08_7999e82dbfb8afa4ecdd0d234e4e7d5a_kovter.exe
Size

362KB
MD5

7999e82dbfb8afa4ecdd0d234e4e7d5a
SHA1

0d0e93872d2b348abd77d667d2e6ca1c8a5e8ce1
SHA256

55c1fe8c4c6adc709a70d0a4e2f2e13a1d396cb2cc6131d53f805bd816ad0169
SHA512

be5a1623ff51dfb64a5e71dc64c80132583809ae67cc46201a09c632d8f5332422bc32d55790621946777d1ebf3eaa7dbe68f96336c72dd35827e2cb4ab67ff6
SSDEEP

6144:kej+ufLiTiZJxhktKkoO36MyYwF9zgFfkPN9fv4Fm/PJ/XVsEQxqgrA/3:BCILYi73WK90ZkPHPJ/XaE7gUP

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

3932 1056 WerFault.exe 2023-03-08_7999e82dbfb8afa4ecdd0d234e4e7d5a_kovter.exe

pid	pid_target	process	target process
3932	1056	WerFault.exe	2023-03-08_7999e82dbfb8afa4ecdd0d234e4e7d5a_kovter.exe

C:\Users\Admin\AppData\Local\Temp\2023-03-08_7999e82dbfb8afa4ecdd0d234e4e7d5a_kovter.exe
"C:\Users\Admin\AppData\Local\Temp\2023-03-08_7999e82dbfb8afa4ecdd0d234e4e7d5a_kovter.exe"
1⤵
PID:1056

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 1056 -s 216
2⤵
- Program crash
PID:3932

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 456 -p 1056 -ip 1056
1⤵
PID:3400