General
- Target bonboncraft.rar
- Size 28.9MB
- Sample260711-pb49dabw91
- SHA256 50c765bbc009af5c063c82e2e814e0b7324bff34d106ce37cc5dc059b10f3e1c
- MD5 9b1fd2da28010c0163f055981156aa35
- SHA1 33cff16aa36c65cdfa6f16402c8d66db27d131c0
- SHA512 1d76fccc9468bd3de1779b6893f878ec63f714a76e697d6ad6b4e21fd21227b667f9291b04b1136d5ee12cb9a6d35fa2402562d7ef1373ac5f3768c7b04278a1
- SSDEEP 786432:v2ySS/OgDXb2h4HJQiV+9mojzar2SAfGO:9zzCh4pQNFHarGGO
- TLSH T17967333D86CE9D86D182EC2CAF589553650AAC078F6A783CFCED6CE41D78B18D235712
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
bonboncraft.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
bonboncraft.exe
Resource
win11ltsc2024-20260709-en
18 signatures
150 seconds
Malware Config
Targets
-
- Target bonboncraft.exe
- Size 139.8MB
- SHA256 5e33d1bc76338bcec8cd570739af5b6cb37aaefa5bcad6537301d47580e70189
- MD5 e73be71f2ace8639ef817a1dca0e111d
- SHA1 dad370bd847c1fbb0a3a7ea2322eccceb5f9f9c0
- SHA512 304ce27dbb7ccfc2f05d742819b4e656ffff63e8bc1dc9dfd164a5594a5f483adcd96ebba2044b33c998b35fcf92159e00fa6b33b38d713c3465c6cc2385e26b
- SSDEEP 786432:PBdSr/5RVvsZXCZMeQ6mtYptgPV1OINWtzUiV6xdUKit4XFe2vuxTLd3:PBdSL5jsZXoQzNWtzUiVynXFelTLd3
- TLSH T177689D0177F6A563D167917946AFA002BB31B0032734DAC7366C8364AF53FE46EBAB14
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Drops desktop.ini file(s)