Analysis
-
max time kernel
135s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
11-05-2023 03:26
Behavioral task
behavioral1
Sample
2023-05-10_a7c46828f47cb73450beed6196d9e657_kovter.exe
Resource
win7-20230220-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2023-05-10_a7c46828f47cb73450beed6196d9e657_kovter.exe
Resource
win10v2004-20230220-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
2023-05-10_a7c46828f47cb73450beed6196d9e657_kovter.exe
-
Size
362KB
-
MD5
a7c46828f47cb73450beed6196d9e657
-
SHA1
9936ab83eb5b47322014e52e5d7074774b8a8075
-
SHA256
15e10f8af629fdb3b60a188507d5756be0e7aa3e9385efcfe253c54aa772afd3
-
SHA512
a4dbba9ac9dd119420bea120a31c1cb5ddc7bd2064eabdf043f767a702bf889979137902bbf55a88935ce56fc6bf3c1c26c19d10d866b476121ba02343afd344
-
SSDEEP
6144:I2+0bJiyuGHtn60kr5+ci4q9R5+EXFhThAdc/LKydC0k2QNqWpm:5+KJpuy106RXXrLPdC32Hp
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4896 2704 WerFault.exe 85
Processes
-
C:\Users\Admin\AppData\Local\Temp\2023-05-10_a7c46828f47cb73450beed6196d9e657_kovter.exe"C:\Users\Admin\AppData\Local\Temp\2023-05-10_a7c46828f47cb73450beed6196d9e657_kovter.exe"1⤵PID:2704
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2704 -s 2242⤵
- Program crash
PID:4896
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 448 -p 2704 -ip 27041⤵PID:2784