Analysis
-
max time kernel
62s -
max time network
132s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
16/04/2023, 04:02
Behavioral task
behavioral1
Sample
2023-04-15_f5a7d67192ab13cf94c11a845065378c_kovter.exe
Resource
win7-20230220-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2023-04-15_f5a7d67192ab13cf94c11a845065378c_kovter.exe
Resource
win10v2004-20230220-en
1 signatures
150 seconds
General
-
Target
2023-04-15_f5a7d67192ab13cf94c11a845065378c_kovter.exe
-
Size
1.1MB
-
MD5
f5a7d67192ab13cf94c11a845065378c
-
SHA1
00b30096a65316e0fbc2eed165a4e7331b983056
-
SHA256
61a7f1253063319f8e243f884d4119f05b04f48c439e2042cd3f73e1cdbd267b
-
SHA512
78fc6a5d3f53d4ba4d97b541afb3c16e70c3d6672a3a5695c1d64b7e3098f573055e6317d0f2ef32c8a087eaa2b57973cc2d418d5cba5f5a30ee3cf6421404b5
-
SSDEEP
12288:XQ9or2e7GdSHxY3Y6Jf/ui47xLHGKdFPH3h/H6U7W:XQ6r2KGYHx8LJXuiIxLmKPPH3paUS
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2520 2176 WerFault.exe 83
Processes
-
C:\Users\Admin\AppData\Local\Temp\2023-04-15_f5a7d67192ab13cf94c11a845065378c_kovter.exe"C:\Users\Admin\AppData\Local\Temp\2023-04-15_f5a7d67192ab13cf94c11a845065378c_kovter.exe"1⤵PID:2176
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2176 -s 1922⤵
- Program crash
PID:2520
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 2176 -ip 21761⤵PID:2348