Resubmissions

10/07/2026, 03:06

260710-dl9fascw2k4

10/07/2026, 03:03

260710-dkf3csdw6t6

General

  • Target
    Bonavol_3.9.1.exe
  • Size 709KB
  • Sample260710-dkf3csdw6t
  • SHA256 268a65829e86d5c3d324eea79b51e59f0a7d07c69d3ba0f700c9cb3aa772566f
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      Bonavol_3.9.1.exe
    • Size 709KB
    • SHA256 268a65829e86d5c3d324eea79b51e59f0a7d07c69d3ba0f700c9cb3aa772566f
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Mark of the Web detected: This indicates that the page was originally saved or cloned.

    • Probable phishing domain

MITRE ATT&CK Enterprise v16

Tasks