e46a0a9810193509839f7c21e2358e16195ce5a95d9609064da9fdec8a1282db

Resubmissions

08/06/2024, 18:36

240608-w85dzaee2x7

08/06/2024, 18:34

240608-w73hzsfc667

08/06/2024, 18:28

240608-w4d18aed517

Sharing

Copy URL Twitter E-mail

General

Target
dreamless.zip
Size 32.6MB
Sample240608-w4d18aed51
SHA256 e46a0a9810193509839f7c21e2358e16195ce5a95d9609064da9fdec8a1282db
MD5 5e65b58c929d8a32d0baac1b4a87f744
SHA1 b0d914e255982575f2f9f9d248d631fd545543ad
SHA512 44781959c2ceee0de9e29bb8cd0aa5ccdee2e1cf6bf11db0a20b269bd45820a0d37f85bcb7ca0524aba6817f902bd169b1ae48e433b2e39d1a92aefc3d2d127f
SSDEEP 786432:5Wd/Nudg0UeRJlNg0DV69GhtsTeCZ/mTP3jKUiz:5Wd1udg0UAF1DV6UATeCZ/mTPViz
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

pyinstaller

Malware Config

Targets

- Target
  dreamless.zip
- Size 32.6MB
- SHA256 e46a0a9810193509839f7c21e2358e16195ce5a95d9609064da9fdec8a1282db
- MD5 5e65b58c929d8a32d0baac1b4a87f744
- SHA1 b0d914e255982575f2f9f9d248d631fd545543ad
- SHA512 44781959c2ceee0de9e29bb8cd0aa5ccdee2e1cf6bf11db0a20b269bd45820a0d37f85bcb7ca0524aba6817f902bd169b1ae48e433b2e39d1a92aefc3d2d127f
- SSDEEP 786432:5Wd/Nudg0UeRJlNg0DV69GhtsTeCZ/mTP3jKUiz:5Wd1udg0UAF1DV6UATeCZ/mTPViz
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral1 behavioral2
- Target
  Dreamless/assets/images/icon.ico
- Size 66KB
- SHA256 a02720e82091db671fdd5de080fa7a01330349788522e200232d8db5f99c6c90
- MD5 6a7d9b5247b2a4b4a5fbf117d73556ac
- SHA1 3040aec4cd4bdaf76e1916e9b3f7d95f2320644d
- SHA512 c4b5a76f4c02fcf7962c305079b25ccc48607e9cd677caeb92751305d364879595866182566dc4b7c5a988757b2e29435a8493b37ae7e20a2f2c7fb5e0e7365d
- SSDEEP 1536:4AUaPQ4EXJ6EipXy9FMXsGjB+V7DQ4X63AsqiGwHak9ireYbLS:8rXni52F47927ogw5aO
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral3 behavioral4
- Target
  Dreamless/assets/images/image_1.png
- Size 263KB
- SHA256 1f5c008c83fbafa8915502c534f1a604e4f463678a21e9b0ff566f9665072569
- MD5 35ec183a0505ddd4a711f3872d1c85b8
- SHA1 9b7c9d1f1d02b2cce9004e0df984292bbbf7d160
- SHA512 660734fd0f3826ddf13aa7aa060a844f99053b23e156c2b4349fd82e5fca5e51ac6b6c504ae810a4747d4746f1ef5ae637cc110fc6f26c5bb96b8fb46bd8a827
- SSDEEP 6144:ENgWgi3ovj8kl91QCldVWyNZn1QVW5ssYuZ3qod:l5i3ovImdVjuVC3Pd
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral5 behavioral6
- Target
  Dreamless/config.json
- Size 40B
- SHA256 7cc8adda38d0442786d12ad622f704217e562ed1bc568090a2a957103c02cd18
- MD5 7decfc86e1a5cdc9a0a8890a45a4a481
- SHA1 5bc16a8f13be1432b811f52b29a6cf66006601d0
- SHA512 f0c3f13ec3b200ab8849a68b6f66443684a267a30b861dd98bfabc863782775f2589328ca426b4ea3e63b63df91a7364948e0c167becb654ecf7bce76ae49c16
- MD5 SHA1 SHA512
Score

3^/10
behavioral7 behavioral8
- Target
  Dreamless/launcher_dreamless.exe
- Size 32.7MB
- SHA256 85b01e2a66fd7ec0b56f99e392c3ca38e062675aa53367cbd9ab11d84f288fdb
- MD5 37ee9d68ebbdd345b86882dcb483b7c4
- SHA1 1274b6098dccd200ff56333d0919bc6492ce9a8b
- SHA512 dd058451f191498341b7874dde8f9bb79474ed3e88d12eecfecf0d99718472ca048bf545f8c4463fd8233908f4219dad2d04e76f3848ec73d9ec2bf97e3703c3
- SSDEEP 786432:YPuQ/OHzeMKVxzx5cWaUI7d4g2b02W8ee0T5tWEUr:YPuQ/OHzDCd5cWC52A2W3e0lVUr
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10
- Loads dropped DLL
behavioral10 behavioral9
- Target
  Launcher.pyc
- Size 9KB
- SHA256 3e4f4db8857f800bb67eaacc16f52751a87e79782b6a09178c517e31028a4fe8
- MD5 1c8c45fef6b59e06963af1c045ceaacd
- SHA1 d87449efea6ac28b611f6b092f0d8db375a11e7e
- SHA512 d1958b78d4c90fd91004ae1668e573fc58a705f427d9fa635f2f2664ce5e1f9cb85f1c3ca49791ab6101d8d6b675cb4bae2033e739a5b1046c04a2eb9f7d1e8e
- SSDEEP 96:wcOkH/+wVVCJRq2fERngtT5sl6H0pwGI252lCH6P4JR4E7cGhDHETYBQfhxNgxvS:w03Mjv2tE+dK4J2WXDHETGQfhzs0aq
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral11 behavioral12
- Target
  Dreamless/logs/2024-04-09-1.log.gz
- Size 2KB
- SHA256 55d65c809b97e1f22bf1fac35d648daa7751da736fa11a6d1f31bd08d80dea29
- MD5 ec8490afee1a4639c5e32bc43b76ee19
- SHA1 75f529c2334b6cae5ff6c6a11e4fe737a459b64d
- SHA512 0dd7ba8116830d4d3f98197886a74197fa8f506869a1db95e31dcb8cc787aab41b16cd26044ed909c16bb44addf640e25b8067ec2fd71db26b8bd0317d67715b
- MD5 SHA1 SHA512
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral13 behavioral14
- Target
  2024-04-09-1.log
- Size 14KB
- SHA256 3a6c9d0d8529b80cd7bc636fb9ea72bfadc7b9bf6bb3da248ae2bd856292312b
- MD5 4af8e354199b21d550332bf5ed945667
- SHA1 4b8de1a79b9304a0f4e3a2ea0e151bddbfba2a6e
- SHA512 936ecc27d986dfa9794de74918e145b7e972fad4dce0f079ed669d8990e9378bb842b9c306a35dce427cb81b45c9f716e169948de663c492a2c1cadbc3275043
- SSDEEP 192:E7BALxuzcOjg2CnD6qxTF2cS3NDeQCelW6m6RYWgL4yyuCFDe6KDogjecq2:GBffit
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral15 behavioral16
- Target
  Dreamless/logs/debug-1.log.gz
- Size 7KB
- SHA256 86a54f38ddaafee0ea717b50199c66f7a30a1928cb4353d736199c49aa79ba44
- MD5 b1ca48a2437a3879ec308eae4b297767
- SHA1 a7c781fd91220994fa442fd54b4e192070dc100a
- SHA512 ca65eb6d67a6fd00561ae586d2f369c8b53d495077a594792ce4025503c8a081458660726120bc6fb5f095bf7e5bc9e28f527b53fbf3976acaf35073d1453463
- SSDEEP 192:aNvKgOPwzeD8hRckBQ7a7ALxfQt1vLwrayreMUg2MLo1TV2:YvnOPFD8RMakFa6yMUT31k
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral17 behavioral18
- Target
  debug-1.log
- Size 61KB
- SHA256 652ae83d02fe79c75bcf7f23a6ea10ecbbfb1c5b16669d1d7072e3e75c5b4cf7
- MD5 19ca6a4b011f740ab5dbac70001d1947
- SHA1 0ce1d679bfeea28fc6775a36bac6b2fff354b25f
- SHA512 1de84f0e6090410f4b7c42669649b8f117f72520204dc14ee31729c61f992f2faf417421280b3eda48dd2c8feb1989abb3c2f9b7bbfa26ca3ebc693813710250
- SSDEEP 768:tjktx7B1oADpqMZPNxOUYQqHNxhbh22F/uVi1hrKJmGnlqQK77t:fc2F/uVi1hrKJmGnYx
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral19 behavioral20
- Target
  Dreamless/logs/debug.log
- Size 264KB
- SHA256 6ec833918994891bd7a7411c4debf89a6f9d08f47dff33d5234630feccd9ee68
- MD5 7e70e45236398abbee9ef9f4068f1c60
- SHA1 5364940cb662f75e153583e5394335bd48a9ed8a
- SHA512 ce1b19d372409c91a3f67382be4c33d1d47f09b0301a5ddedaac4ffb47fec55c2422d15575e405e429bed43b0dd164d7c141831d2353be420a650976e0f96128
- SSDEEP 1536:UUlKHS6IkOh35TzCRWOOCbVed0rL/8NYgdnnQpyFdMz3gN71IjeTNzRuJURxtwwh:l35rR6URJvsvufRump
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral21 behavioral22
- Target
  Dreamless/logs/latest.log
- Size 79KB
- SHA256 86d466fdcace8386fd4867bbdbc89a0c40df23247996d8776c6bd24ae72532f8
- MD5 423cce14cad8039a2fe735115e63a025
- SHA1 b7acc262f162db72fef5f12c5abe6baa17962f6a
- SHA512 237538bb2853b027942bc64ad440e9e1efafc705204fc0c28ad1f17d1d31b45ed48cc5f7979b92f9a53b508078a4d606651dfcbea9c8e373aca1fe8fc474e224
- SSDEEP 768:wCY0ZgLZz6XrOAj1u5AvdWvdw5IE8rpgHkc/DAWemCa4NbpqpmERMfMvx86oeZ9b:wGUWvsv6Ip324Pbl75+0EL
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral23 behavioral24

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Loads dropped DLL

Checks computer location settings

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24