Analysis
-
max time kernel
127s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
09-03-2023 14:50
Behavioral task
behavioral1
Sample
2023-03-08_57827453f6d1aedbcbd5fb94bf6d967f_kovter.exe
Resource
win7-20230220-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2023-03-08_57827453f6d1aedbcbd5fb94bf6d967f_kovter.exe
Resource
win10v2004-20230220-en
1 signatures
150 seconds
General
-
Target
2023-03-08_57827453f6d1aedbcbd5fb94bf6d967f_kovter.exe
-
Size
362KB
-
MD5
57827453f6d1aedbcbd5fb94bf6d967f
-
SHA1
85fb1fcd31ef5feb75084a5cfaf93199fba9493b
-
SHA256
20615389531a8376afd32a590433aca5ab2bbb1fecdaac004328084983c02b73
-
SHA512
7dd0f9bb6c88e242e89ba9d5ab291e0818f45cae94cc912849638543649c648c1d38eb1908aecbfb2e36bdfa6a7d2421cfbd0fb1ccd29fbe27e914287d8307b5
-
SSDEEP
6144:o5oc5QFI2tZbIakJrUurSkIXZjFCURf93hopo/llDHDgSQ5qEMEed:EoEkzXuvCZ7RhLDHcSvp
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 1532 1048 WerFault.exe 2023-03-08_57827453f6d1aedbcbd5fb94bf6d967f_kovter.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2023-03-08_57827453f6d1aedbcbd5fb94bf6d967f_kovter.exe"C:\Users\Admin\AppData\Local\Temp\2023-03-08_57827453f6d1aedbcbd5fb94bf6d967f_kovter.exe"1⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1048 -s 2242⤵
- Program crash
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 1048 -ip 10481⤵