3dbd02c7684044f5a07aacaa454ac3e97a46577a06c4915aabaf61c4e060b17a | Triage™

Login
Reports

Overview

overview

3

Static

static

3

Bonavol_0U9NF.zip

windows10-2004-x64

1

Bonavol_0U9NF.zip

windows11-ltsc_2024-x64

1

Bonavol_0U9NF.exe

windows10-2004-x64

1

Bonavol_0U9NF.exe

windows11-ltsc_2024-x64

1

Bonavol_0U...ig.ini

windows10-2004-x64

1

Bonavol_0U...ig.ini

windows11-ltsc_2024-x64

1

Bonavol_0U...se.txt

windows10-2004-x64

1

Bonavol_0U...se.txt

windows11-ltsc_2024-x64

1

bin/resource_01.dat

windows10-2004-x64

3

bin/resource_01.dat

windows11-ltsc_2024-x64

3

bin/resource_02.dat

windows10-2004-x64

3

bin/resource_02.dat

windows11-ltsc_2024-x64

3

bin/resource_03.dat

windows10-2004-x64

3

bin/resource_03.dat

windows11-ltsc_2024-x64

3

bin/resource_04.dat

windows10-2004-x64

3

bin/resource_04.dat

windows11-ltsc_2024-x64

3

bin/resource_05.dat

windows10-2004-x64

3

bin/resource_05.dat

windows11-ltsc_2024-x64

3

docs/readme.txt

windows10-2004-x64

1

docs/readme.txt

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

Target
Bonavol_0U9NF.zip
Size 156.7MB
Sample260722-t734eavzdv
SHA256 3dbd02c7684044f5a07aacaa454ac3e97a46577a06c4915aabaf61c4e060b17a
MD5 00214ba968a2da50095a015f4aa6381d
SHA1 0789c49b76076bb9f546399546ce2a76e803cdc2
SHA512 57429fda6fc334e223634a9ca955ec6623f25fec1c987c23f992de5082bd5d4316520eff42660de8bbf704eb233b3ca421820fea68dcd2ee06640b750019b57c
SSDEEP 3145728:HzIM/B+P11SGcAZIMIsX50jJaduAzXoVHupI6nfTshFMi:HNp+N13iMIpAzXoApDSD
TLSH
T1EA7833FBDA0CFF491680ECC39AD4DCB7A511639883976916854BDE8376B60B13A5C38C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution ransomware

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

Bonavol_0U9NF.zip

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

Bonavol_0U9NF.zip

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

Bonavol_0U9NF.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral4

Sample

Bonavol_0U9NF.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral5

Sample

Bonavol_0U9NF_config.ini

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral6

Sample

Bonavol_0U9NF_config.ini

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral7

Sample

Bonavol_0U9NF_license.txt

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral8

Sample

Bonavol_0U9NF_license.txt

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral9

Sample

bin/resource_01.dat

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral10

Sample

bin/resource_01.dat

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral11

Sample

bin/resource_02.dat

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral12

Sample

bin/resource_02.dat

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral13

Sample

bin/resource_03.dat

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral14

Sample

bin/resource_03.dat

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral15

Sample

bin/resource_04.dat

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral16

Sample

bin/resource_04.dat

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral17

Sample

bin/resource_05.dat

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral18

Sample

bin/resource_05.dat

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral19

Sample

docs/readme.txt

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral20

Sample

docs/readme.txt

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Malware Config

Targets

- Target
  Bonavol_0U9NF.zip
- Size 156.7MB
- SHA256 3dbd02c7684044f5a07aacaa454ac3e97a46577a06c4915aabaf61c4e060b17a
- MD5 00214ba968a2da50095a015f4aa6381d
- SHA1 0789c49b76076bb9f546399546ce2a76e803cdc2
- SHA512 57429fda6fc334e223634a9ca955ec6623f25fec1c987c23f992de5082bd5d4316520eff42660de8bbf704eb233b3ca421820fea68dcd2ee06640b750019b57c
- SSDEEP 3145728:HzIM/B+P11SGcAZIMIsX50jJaduAzXoVHupI6nfTshFMi:HNp+N13iMIpAzXoApDSD
- TLSH
  T1EA7833FBDA0CFF491680ECC39AD4DCB7A511639883976916854BDE8376B60B13A5C38C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  Bonavol_0U9NF.exe
- Size 6.6MB
- SHA256 d23b9609b06ab23243543ee0d8ff0d4c1966530576fa37bb2ecde97309ebbc9e
- MD5 639caf8972cc761a5f577024ee684c4f
- SHA1 17543f04ff26829f01d4b385911df90b5d152f7a
- SHA512 42161cf502211338132d6a8900fd91b6bdb6b7218eab665906be1f05f712c91cfdcf1c20c0b655f36e2e7801a103b2fe1de75b6efe3a49b82fd80f088f5056e2
- SSDEEP 49152:xQ5wKyD/UzzobuH1twKVR6Se6gawYOztZqPgojBHB:IFBHB
- TLSH
  T11166E7EB225EB569F92E893AC0538A03B4F3B1750B73C1E731A107678AD54CC5FBA521
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  Bonavol_0U9NF_config.ini
- Size 100B
- SHA256 da9c9f02df9b813f588c0954ef713a2bec445370a5312b73e5ab559e7e046046
- MD5 42963085e375f78bf98f6d8c4be7acb1
- SHA1 0661b9a0b6f746f3452e93a06349af64eedda7f9
- SHA512 773a5334c52e9912f2bced2defe44d24ae3d8528c5d38d89e9a6ee07c064bb74ffeee8d1f93a90ebebf082fe4831284d85edc7034f05a18d6e1f82411a8c6b1b
- TLSH
  T1B6B01298142490314414519E90380602E5791BD88009225C6510649C53DA9B77CDEC41
- MD5 SHA1 SHA512 TLSH
Score

1^/10

ransomware
behavioral5 behavioral6
- Target
  Bonavol_0U9NF_license.txt
- Size 136B
- SHA256 bb3328a9cb4f9f71b987c8933ca43098dd2bdd2d6f389a0997f7c99bf81ebd68
- MD5 a605ca64524b286f722aad0954dac9b1
- SHA1 f744b1c6f5a191f66ed76308810229784777af65
- SHA512 ad4a9237d278ff8f8fdfcf0011269f169966ed396e6ff7f9ce2fd30ad51d2c92bead3975a2769cf32f9cd91c8a970d5bb7c3fe2f1333376b3b0b43b3632ed6b7
- TLSH
  T19DC02B6F102260D36546104F54C540409761C8DC789B00B50C2781063323C3DBB3B938
- MD5 SHA1 SHA512 TLSH
Score

1^/10

ransomware
behavioral7 behavioral8
- Target
  bin/resource_01.dat
- Size 31.0MB
- SHA256 0e9839dca3763c9e207aa3df495dcc2113bb56884f1a3f8ddd3a63b0a832d6a0
- MD5 9d0e6cd01da35f1509ee202dcece763b
- SHA1 eee019016e00e05f6d70b9ba67e6983590d28c96
- SHA512 cb319fccf4ff8cce06bb995ea2659e96a99a58eca1267fbad0fd495487093d7bb47eb8baabea163913b869f5312ea9873c4502603e79e98a33a11f72103ce58c
- SSDEEP 786432:vTdWYZuGdmb+8+M2kOnJU76B9AjoXGTnhkcCu3C1:vTsYk/+x/zB9A0WT3q
- TLSH
  T1576733E9CF44AA95A3446F279D74AE43960B544FC39AB83A2433594F92F44110DBB3FC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  bin/resource_02.dat
- Size 31.0MB
- SHA256 67c886481236d39328e4321d28eba6db23552556c299aafb2eacbff7a0e2689c
- MD5 64747f5ed01ae13086972ddd3da9ce36
- SHA1 f6304415e747df66e47139ba75a64c14143f5f75
- SHA512 74abc0360fcf3c95887bb6e25eda0f5a93140ec65b5fe0618cea34bd137c36833b3863417ecc7f83b37ef86244793605926fdd31f6d6beb2c020650f56e1a080
- SSDEEP 786432:zShdhKOAMXcuJ5jVgHVmAFZnlqFu25Oo5F8bZiHN5dY6c3:0aMXfVg1xAFu2EAF8bIt466
- TLSH
  T16E67332BDD08BB8C1DC3A5824686F835570457A05FFF00082987DD9DFBE7A9FBAA5181
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  bin/resource_03.dat
- Size 31.0MB
- SHA256 d4ff0fb5fd0f9945ffb510c2257c9575e77cd565b02a8579f0879c3442ab703b
- MD5 fdd2d9568fda9e40bdaf531f1d320bbf
- SHA1 13e9eac20db40f4a154685a2de3262e736525c45
- SHA512 7cde0d5f710d44c6b12d19a956d47f36cab217f16d1435b7ecde61b55b970ddc6533e77530c3b9f9752a075b042c9c65b8fb7cf394f4064e69299274b765f2e3
- SSDEEP 786432:6C6XhcrWygisawNZljCj/R4/1/DQ76A0GScCYZBSI9:V6xcrWygHxA54t/03803v
- TLSH
  T112673379918C97980160BCD32E1E1BDF7EA03ADC97836F154BA3F94291B30BE1858E57
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  bin/resource_04.dat
- Size 31.0MB
- SHA256 fdcb09553dae4d3e58afd7a6decaa5d33cef42503b6b592bdabc5eefd910b5ee
- MD5 144b156092a5aee9f6112daa613304fa
- SHA1 137d440ab8d995a92c670f8e0f8f742c26a5692b
- SHA512 8133a635c5575b01d2dd4272666ef60fe0c4e8cac11c78917d8480cfcfe822e4efed49da92a894646c7563f1462bf4b3915079211983ac071cdc7fbe43e326b5
- SSDEEP 786432:R3m3bBIuhJpsjjtNxU58qNQtt0x50ucsNaSvkuRc0Jn:Rm3btW/tNxU5bHM/SvkP0Jn
- TLSH
  T10A6733BF571C99579B7A80C1E4E98482C437F716966B3B03A69CC9A31CB24F9B50C7C8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  bin/resource_05.dat
- Size 31.0MB
- SHA256 c3def47b233a70fe2efe2403b5e5d52cbe0ea2663041a70fd68e454097ecc28c
- MD5 2e59dee9f95743fb410cd752835bc54f
- SHA1 5274999db7cd61617bb7c4241f22d4d6ea9920aa
- SHA512 8c2448bb4594a1da8c77cfa44151298ac8186f03a8f7c73a30a62bf5e31ff584a9a63d11886f6085c37ce1681e8cc0ce490778620cbf41a69eb682e8e5282f11
- SSDEEP 786432:oBuYkY5q13Dff7lnT51pBcVoqyM/1jRvqfDr:oBuYkYQ13DfbB+oq7WfP
- TLSH
  T1FE6733A7B0AAFF173492DD9E5360C0CBE8AB2670925AD555C01E9E83BC3C3713396671
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  docs/readme.txt
- Size 136B
- SHA256 1ea001f1ecb3cd265f52a4b79c08bf7098f893662e2cf2e9af26f3235f87081c
- MD5 363acd28c773b7d65d89ea8aa90a9bf0
- SHA1 f3d9b912bfb2df59f28eba1dfe730919e89e114b
- SHA512 19cab58dd7fcb1a4027b88d091b770051563b4e6fc3cdd9db099519b89bd70da90e8191c0d80bd9fbf12edae1466532d9c5fb364c347a192ae7924168790c559
- TLSH
  T156C02BAA885343B318F02EE7C32C32C122202049F4330147F913C020F04785003D40C2
- MD5 SHA1 SHA512 TLSH
Score

1^/10

ransomware
behavioral19 behavioral20

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

© 2018-2026

Terms | Privacy