General
- Target BonziKill.exe
- Size 77.8MB
- Sample260705-sb92eac12s
- SHA256 27dcecbb8e47c6f20f54466d4f14afade78c9518f614c6555fe64b9f37efb6fd
- MD5 97893da3ea0e186290435246020bf018
- SHA1 9a898f7e782cde4d1c98793a70faf363627a1596
- SHA512 ea54c3b9011e7ea3e024b88da20de7d282393455b504937e4a48e4a7f963d48391f9bd46cf31fb4ae3e63464f8d9467a48581217cf587fcee1d137e5edf6e9c8
- SSDEEP 1572864:B9sZOPS0ils8AkMVmrASKdsOJsyjq8aMHH2iROEu2nqle9T32XeB:7scIovdsYsye3MHHnROEIleZ
- TLSH T1F8083316DAD1042BE2E655FC7A5A2A01EA6C352FB2F5CE0F80A213710FD7CC1875A767
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
BonziKill.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
BonziKill.exe
Resource
win11ltsc2024-20260629-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target BonziKill.exe
- Size 77.8MB
- SHA256 27dcecbb8e47c6f20f54466d4f14afade78c9518f614c6555fe64b9f37efb6fd
- MD5 97893da3ea0e186290435246020bf018
- SHA1 9a898f7e782cde4d1c98793a70faf363627a1596
- SHA512 ea54c3b9011e7ea3e024b88da20de7d282393455b504937e4a48e4a7f963d48391f9bd46cf31fb4ae3e63464f8d9467a48581217cf587fcee1d137e5edf6e9c8
- SSDEEP 1572864:B9sZOPS0ils8AkMVmrASKdsOJsyjq8aMHH2iROEu2nqle9T32XeB:7scIovdsYsye3MHHnROEIleZ
- TLSH T1F8083316DAD1042BE2E655FC7A5A2A01EA6C352FB2F5CE0F80A213710FD7CC1875A767
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE