Analysis
- max time kernel
148s - max time network
122s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260629-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260629-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
02/07/2026, 17:43
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Bonavol_3.6.9.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
Bonavol_3.6.9.exe
Resource
win11ltsc2024-20260629-en
2 signatures
150 seconds
General
- Target Bonavol_3.6.9.exe
- Size 8.1MB
- Sample260702-wan94aaz9x
- SHA256 d2d8361f14f7055e443e2396362ebce3b21292587327c9888c8f4d66db3daac4
- MD5 a70e82e5d9c7565d93f57a0b8f97c786
- SHA1 b8696e7c15589cddf3ec282e7fd3997e5f294e7a
- SHA512 cba74b5b5c0de0fe67d4237f2fecb89a888febb348283de2d6be30e1f85ed7eb7ffc05515e4426b794418f424bd720fc5d38a9fe2fbdd4494ec0794657c3b10c
- SSDEEP 49152:K84PiLy60f1j2b2S8Zx+0dRT0S9w7k2K5viTM+dPzPhanrzNlEk:9L4ocVL
- TLSH T14886812B62E4B268CDD9817AC0A28E03F7FE61B91733C6D787A50F795A554F05E3E120
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Modifies registry class 1 IoCs
description ioc Process Key created \REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2639994890-966400312-4246138405-1000\{999A8103-9731-4A7D-8700-AA898AA7137E} Bonavol_3.6.9.exe - Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 4164 Bonavol_3.6.9.exe 4164 Bonavol_3.6.9.exe