dreamless.zip
- SHA256 e46a0a9810193509839f7c21e2358e16195ce5a95d9609064da9fdec8a1282db
Password
ll
Overview
overview
7Static
static
3dreamless.zip
windows7-x64
1dreamless.zip
windows10-2004-x64
1Dreamless/...on.ico
windows7-x64
3Dreamless/...on.ico
windows10-2004-x64
3Dreamless/..._1.png
windows7-x64
3Dreamless/..._1.png
windows10-2004-x64
3Dreamless/config.json
windows7-x64
3Dreamless/config.json
windows10-2004-x64
3Dreamless/...ss.exe
windows7-x64
7Dreamless/...ss.exe
windows10-2004-x64
7Launcher.pyc
windows7-x64
3Launcher.pyc
windows10-2004-x64
3Dreamless/...log.gz
windows7-x64
3Dreamless/...log.gz
windows10-2004-x64
72024-04-09-1.log
windows7-x64
12024-04-09-1.log
windows10-2004-x64
1Dreamless/...log.gz
windows7-x64
3Dreamless/...log.gz
windows10-2004-x64
3debug-1.log
windows7-x64
1debug-1.log
windows10-2004-x64
1Dreamless/...ug.log
windows7-x64
1Dreamless/...ug.log
windows10-2004-x64
1Dreamless/...st.log
windows7-x64
1Dreamless/...st.log
windows10-2004-x64
1Behavioral task
behavioral1
Sample
dreamless.zip
Resource
win7-20240215-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
dreamless.zip
Resource
win10v2004-20240508-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
Dreamless/assets/images/icon.ico
Resource
win7-20240508-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral4
Sample
Dreamless/assets/images/icon.ico
Resource
win10v2004-20240426-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral5
Sample
Dreamless/assets/images/image_1.png
Resource
win7-20240221-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral6
Sample
Dreamless/assets/images/image_1.png
Resource
win10v2004-20240508-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral7
Sample
Dreamless/config.json
Resource
win7-20240508-en
windows7-x64
5 signatures
150 seconds
Behavioral task
behavioral8
Sample
Dreamless/config.json
Resource
win10v2004-20240226-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral9
Sample
Dreamless/launcher_dreamless.exe
Resource
win7-20240215-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral10
Sample
Dreamless/launcher_dreamless.exe
Resource
win10v2004-20240426-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral11
Sample
Launcher.pyc
Resource
win7-20240508-en
windows7-x64
5 signatures
150 seconds
Behavioral task
behavioral12
Sample
Launcher.pyc
Resource
win10v2004-20240508-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral13
Sample
Dreamless/logs/2024-04-09-1.log.gz
Resource
win7-20240221-en
windows7-x64
5 signatures
150 seconds
Behavioral task
behavioral14
Sample
Dreamless/logs/2024-04-09-1.log.gz
Resource
win10v2004-20240226-en
windows10-2004-x64
6 signatures
150 seconds
Behavioral task
behavioral15
Sample
2024-04-09-1.log
Resource
win7-20240221-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral16
Sample
2024-04-09-1.log
Resource
win10v2004-20240426-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral17
Sample
Dreamless/logs/debug-1.log.gz
Resource
win7-20240221-en
windows7-x64
5 signatures
150 seconds
Behavioral task
behavioral18
Sample
Dreamless/logs/debug-1.log.gz
Resource
win10v2004-20240426-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral19
Sample
debug-1.log
Resource
win7-20240508-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral20
Sample
debug-1.log
Resource
win10v2004-20240508-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral21
Sample
Dreamless/logs/debug.log
Resource
win7-20240221-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral22
Sample
Dreamless/logs/debug.log
Resource
win10v2004-20240508-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral23
Sample
Dreamless/logs/latest.log
Resource
win7-20240419-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral24
Sample
Dreamless/logs/latest.log
Resource
win10v2004-20240508-en
windows10-2004-x64
1 signatures
150 seconds
General
- Target dreamless.zip
- Size 32.6MB
- Sample240608-w4d18aed51
- SHA256 e46a0a9810193509839f7c21e2358e16195ce5a95d9609064da9fdec8a1282db
- MD5 5e65b58c929d8a32d0baac1b4a87f744
- SHA1 b0d914e255982575f2f9f9d248d631fd545543ad
- SHA512 44781959c2ceee0de9e29bb8cd0aa5ccdee2e1cf6bf11db0a20b269bd45820a0d37f85bcb7ca0524aba6817f902bd169b1ae48e433b2e39d1a92aefc3d2d127f
- SSDEEP 786432:5Wd/Nudg0UeRJlNg0DV69GhtsTeCZ/mTP3jKUiz:5Wd1udg0UAF1DV6UATeCZ/mTPViz
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Detects Pyinstaller 1 IoCs
resource yara_rule static1/unpack001/Dreamless/launcher_dreamless.exe pyinstaller - Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Dreamless/launcher_dreamless.exe
File Explorer
-
dreamless.zip.zip 32.6MB
-
Dreamless/assets/images/icon.ico66KB
-
Dreamless/assets/images/image_1.png.png 263KB
-
Dreamless/config.json40B
-
Dreamless/launcher_dreamless.exe.exe 32.7MB
-
Launcher.pyc9KB
-
Dreamless/logs/2024-04-09-1.log.gz.gz 2KB
-
2024-04-09-1.log14KB
-
Dreamless/logs/debug-1.log.gz.gz 7KB
-
debug-1.log61KB
-
Dreamless/logs/debug.log264KB
-
Dreamless/logs/latest.log79KB
Dreamless/assets/images/icon.ico
- SHA256 a02720e82091db671fdd5de080fa7a01330349788522e200232d8db5f99c6c90
- MD5 6a7d9b5247b2a4b4a5fbf117d73556ac
- SHA1 3040aec4cd4bdaf76e1916e9b3f7d95f2320644d
- SHA512 c4b5a76f4c02fcf7962c305079b25ccc48607e9cd677caeb92751305d364879595866182566dc4b7c5a988757b2e29435a8493b37ae7e20a2f2c7fb5e0e7365d
- SSDEEP 1536:4AUaPQ4EXJ6EipXy9FMXsGjB+V7DQ4X63AsqiGwHak9ireYbLS:8rXni52F47927ogw5aO
- MD5 SHA1 SHA512 SSDEEP
Dreamless/assets/images/image_1.png
- SHA256 1f5c008c83fbafa8915502c534f1a604e4f463678a21e9b0ff566f9665072569
- MD5 35ec183a0505ddd4a711f3872d1c85b8
- SHA1 9b7c9d1f1d02b2cce9004e0df984292bbbf7d160
- SHA512 660734fd0f3826ddf13aa7aa060a844f99053b23e156c2b4349fd82e5fca5e51ac6b6c504ae810a4747d4746f1ef5ae637cc110fc6f26c5bb96b8fb46bd8a827
- SSDEEP 6144:ENgWgi3ovj8kl91QCldVWyNZn1QVW5ssYuZ3qod:l5i3ovImdVjuVC3Pd
- MD5 SHA1 SHA512 SSDEEP
Password
ll
Dreamless/config.json
- SHA256 7cc8adda38d0442786d12ad622f704217e562ed1bc568090a2a957103c02cd18
- MD5 7decfc86e1a5cdc9a0a8890a45a4a481
- SHA1 5bc16a8f13be1432b811f52b29a6cf66006601d0
- SHA512 f0c3f13ec3b200ab8849a68b6f66443684a267a30b861dd98bfabc863782775f2589328ca426b4ea3e63b63df91a7364948e0c167becb654ecf7bce76ae49c16
- MD5 SHA1 SHA512
Dreamless/launcher_dreamless.exe
- IMPHASH 0b5552dccd9d0a834cea55c0c8fc05be
- SHA256 85b01e2a66fd7ec0b56f99e392c3ca38e062675aa53367cbd9ab11d84f288fdb
- MD5 37ee9d68ebbdd345b86882dcb483b7c4
- SHA1 1274b6098dccd200ff56333d0919bc6492ce9a8b
- SHA512 dd058451f191498341b7874dde8f9bb79474ed3e88d12eecfecf0d99718472ca048bf545f8c4463fd8233908f4219dad2d04e76f3848ec73d9ec2bf97e3703c3
- SSDEEP 786432:YPuQ/OHzeMKVxzx5cWaUI7d4g2b02W8ee0T5tWEUr:YPuQ/OHzDCd5cWC52A2W3e0lVUr
- MD5 SHA1 SHA512 SSDEEP
-
Detects Pyinstaller
-
Unsigned PE
Checks for missing Authenticode signature.
Password
ll
Minor OS version
2
Major OS version
5
Entry point
45840
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
user32
CreateWindowExW
MessageBoxW
MessageBoxA
SystemParametersInfoW
DestroyIcon
SetWindowLongPtrW
GetWindowLongPtrW
GetClientRect
InvalidateRect
ReleaseDC
GetDC
DrawTextW
GetDialogBaseUnits
EndDialog
DialogBoxIndirectParamW
MoveWindow
SendMessageW
comctl32
ord380
kernel32
GetStringTypeW
GetFileAttributesExW
HeapReAlloc
FlushFileBuffers
GetCurrentDirectoryW
IsValidCodePage
GetACP
GetModuleHandleW
MulDiv
GetLastError
SetDllDirectoryW
GetModuleFileNameW
GetProcAddress
GetCommandLineW
GetEnvironmentVariableW
GetOEMCP
ExpandEnvironmentStringsW
CreateDirectoryW
GetTempPathW
WaitForSingleObject
Sleep
GetExitCodeProcess
CreateProcessW
GetStartupInfoW
FreeLibrary
LoadLibraryExW
SetConsoleCtrlHandler
FindClose
FindFirstFileExW
CloseHandle
GetCurrentProcess
LocalFree
FormatMessageW
MultiByteToWideChar
WideCharToMultiByte
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
GetTimeZoneInformation
HeapSize
WriteConsoleW
SetEnvironmentVariableW
RtlUnwindEx
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
SetEndOfFile
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
EncodePointer
RaiseException
RtlPcToFileHeader
GetCommandLineA
CreateFileW
GetDriveTypeW
GetFileInformationByHandle
GetFileType
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
GetFullPathNameW
RemoveDirectoryW
FindNextFileW
SetStdHandle
DeleteFileW
ReadFile
GetStdHandle
WriteFile
ExitProcess
GetModuleHandleExW
HeapFree
GetConsoleMode
ReadConsoleW
SetFilePointerEx
GetConsoleOutputCP
GetFileSizeEx
HeapAlloc
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
CompareStringW
LCMapStringW
advapi32
OpenProcessToken
GetTokenInformation
ConvertStringSecurityDescriptorToSecurityDescriptorW
ConvertSidToStringSidW
gdi32
SelectObject
DeleteObject
CreateFontIndirectW
Name
.text
Size
162KB
Virtual Size
162KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
75KB
Virtual Size
74KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
64KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
512B
Virtual Size
348B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
68KB
Virtual Size
67KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=7, id=259, version=30795,
count=191, id=261, version=30795,
count=10, id=260, version=30795,
count=4, id=253, version=31823,
count=40, id=261, version=31823,
count=17, id=260, version=31823,
count=9, id=259, version=31823,
count=11, id=257, version=30795,
count=139, id=1, productName=Unmarked objects,
count=20, id=260, version=31937,
count=1, id=258, version=31937,
Launcher.pyc
- SHA256 3e4f4db8857f800bb67eaacc16f52751a87e79782b6a09178c517e31028a4fe8
- MD5 1c8c45fef6b59e06963af1c045ceaacd
- SHA1 d87449efea6ac28b611f6b092f0d8db375a11e7e
- SHA512 d1958b78d4c90fd91004ae1668e573fc58a705f427d9fa635f2f2664ce5e1f9cb85f1c3ca49791ab6101d8d6b675cb4bae2033e739a5b1046c04a2eb9f7d1e8e
- SSDEEP 96:wcOkH/+wVVCJRq2fERngtT5sl6H0pwGI252lCH6P4JR4E7cGhDHETYBQfhxNgxvS:w03Mjv2tE+dK4J2WXDHETGQfhzs0aq
- MD5 SHA1 SHA512 SSDEEP
Dreamless/logs/2024-04-09-1.log.gz
- SHA256 55d65c809b97e1f22bf1fac35d648daa7751da736fa11a6d1f31bd08d80dea29
- MD5 ec8490afee1a4639c5e32bc43b76ee19
- SHA1 75f529c2334b6cae5ff6c6a11e4fe737a459b64d
- SHA512 0dd7ba8116830d4d3f98197886a74197fa8f506869a1db95e31dcb8cc787aab41b16cd26044ed909c16bb44addf640e25b8067ec2fd71db26b8bd0317d67715b
- MD5 SHA1 SHA512
Password
ll
2024-04-09-1.log
- SHA256 3a6c9d0d8529b80cd7bc636fb9ea72bfadc7b9bf6bb3da248ae2bd856292312b
- MD5 4af8e354199b21d550332bf5ed945667
- SHA1 4b8de1a79b9304a0f4e3a2ea0e151bddbfba2a6e
- SHA512 936ecc27d986dfa9794de74918e145b7e972fad4dce0f079ed669d8990e9378bb842b9c306a35dce427cb81b45c9f716e169948de663c492a2c1cadbc3275043
- SSDEEP 192:E7BALxuzcOjg2CnD6qxTF2cS3NDeQCelW6m6RYWgL4yyuCFDe6KDogjecq2:GBffit
- MD5 SHA1 SHA512 SSDEEP
Dreamless/logs/debug-1.log.gz
- SHA256 86a54f38ddaafee0ea717b50199c66f7a30a1928cb4353d736199c49aa79ba44
- MD5 b1ca48a2437a3879ec308eae4b297767
- SHA1 a7c781fd91220994fa442fd54b4e192070dc100a
- SHA512 ca65eb6d67a6fd00561ae586d2f369c8b53d495077a594792ce4025503c8a081458660726120bc6fb5f095bf7e5bc9e28f527b53fbf3976acaf35073d1453463
- SSDEEP 192:aNvKgOPwzeD8hRckBQ7a7ALxfQt1vLwrayreMUg2MLo1TV2:YvnOPFD8RMakFa6yMUT31k
- MD5 SHA1 SHA512 SSDEEP
Password
ll
debug-1.log
- SHA256 652ae83d02fe79c75bcf7f23a6ea10ecbbfb1c5b16669d1d7072e3e75c5b4cf7
- MD5 19ca6a4b011f740ab5dbac70001d1947
- SHA1 0ce1d679bfeea28fc6775a36bac6b2fff354b25f
- SHA512 1de84f0e6090410f4b7c42669649b8f117f72520204dc14ee31729c61f992f2faf417421280b3eda48dd2c8feb1989abb3c2f9b7bbfa26ca3ebc693813710250
- SSDEEP 768:tjktx7B1oADpqMZPNxOUYQqHNxhbh22F/uVi1hrKJmGnlqQK77t:fc2F/uVi1hrKJmGnYx
- MD5 SHA1 SHA512 SSDEEP
Dreamless/logs/debug.log
- SHA256 6ec833918994891bd7a7411c4debf89a6f9d08f47dff33d5234630feccd9ee68
- MD5 7e70e45236398abbee9ef9f4068f1c60
- SHA1 5364940cb662f75e153583e5394335bd48a9ed8a
- SHA512 ce1b19d372409c91a3f67382be4c33d1d47f09b0301a5ddedaac4ffb47fec55c2422d15575e405e429bed43b0dd164d7c141831d2353be420a650976e0f96128
- SSDEEP 1536:UUlKHS6IkOh35TzCRWOOCbVed0rL/8NYgdnnQpyFdMz3gN71IjeTNzRuJURxtwwh:l35rR6URJvsvufRump
- MD5 SHA1 SHA512 SSDEEP
Dreamless/logs/latest.log
- SHA256 86d466fdcace8386fd4867bbdbc89a0c40df23247996d8776c6bd24ae72532f8
- MD5 423cce14cad8039a2fe735115e63a025
- SHA1 b7acc262f162db72fef5f12c5abe6baa17962f6a
- SHA512 237538bb2853b027942bc64ad440e9e1efafc705204fc0c28ad1f17d1d31b45ed48cc5f7979b92f9a53b508078a4d606651dfcbea9c8e373aca1fe8fc474e224
- SSDEEP 768:wCY0ZgLZz6XrOAj1u5AvdWvdw5IE8rpgHkc/DAWemCa4NbpqpmERMfMvx86oeZ9b:wGUWvsv6Ip324Pbl75+0EL
- MD5 SHA1 SHA512 SSDEEP