Resubmissions
17/07/2026, 16:27
260717-tx6fsafv4q317/07/2026, 12:48
260717-p17e2afv3s317/07/2026, 12:39
260717-pvs1fsft7s417/07/2026, 12:27
260717-pmy7habs4k8Analysis
- max time kernel
300s - max time network
145s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
17/07/2026, 12:39
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Bonavol_p3ti.exe
Resource
win10v2004-20260513-en
11 signatures
300 seconds
Behavioral task
behavioral2
Sample
Bonavol_p3ti.exe
Resource
win11ltsc2024-20260709-en
2 signatures
300 seconds
General
- Target Bonavol_p3ti.exe
- Size 6.6MB
- Sample260717-pvs1fsft7s
- SHA256 4c7d4040e08fe12dab0c63a32c3134ae6c213fcddbe322ab341b926296cd6123
- MD5 bc499760afc08527daf444cca37808a6
- SHA1 3550707bce53c9c589cdfe9b20907c63bb22662d
- SHA512 207deb6f79c545e384ee9b5295530a8d292941c7246a266d74aa4e9a12ee022b44e2bc2248148fbd0fee703f63267ff299178a5ff1c694e1adb6dd854cd3c28e
- SSDEEP 49152:RDOltt4lwWIw0bPntujeipCS1Ynr4HBtGUzBvGfzvvviv:RdbYrav6Tviv
- TLSH T1B466086B665D82ADF159A53AC06E8B40E5F371771B3781E786B00B2F4B43AC4DF3A124
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Modifies registry class 1 IoCs
description ioc Process Key created \REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1738198120-2966725515-3980530802-1000\{E8EDF2D5-B240-40B0-8031-8EA5CFAE3EE0} Bonavol_p3ti.exe - Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 1808 Bonavol_p3ti.exe 1808 Bonavol_p3ti.exe