General
- Target 2.Patcher.zip
- Size 269.2MB
- Sample260811-be4v5aself
- SHA256 b2b8b4f40351cbc66e67ab58a2c05911c12ececcf91f46c4228f3d14e2044a4c
- MD5 ec7a07db18cbfc854cd20613e4d76760
- SHA1 e03803e56b6f76dbb943c0d69aef62b816378699
- SHA512 7964a35ae963dda491d88387b4956e43447a23ae86d62124de6245012b2cdf134dc3b552dfe124d71a00f3994601849467382db023fd5bb501e05e010fe342ef
- SSDEEP 6291456:xNEcyFY4hm8bqp56oezm/lXv2vndOY1YdBe:xSc2YJpbt2vdOYsM
- TLSH T120D833737B4CC5CCDAD7163762C50F5B1C7AAC78B70882A666EAE75998123C71B007E2
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
1.CineDream.msi
Resource
win10v2004-20260513-en
17 signatures
150 seconds
Behavioral task
behavioral2
Sample
1.CineDream.msi
Resource
win11ltsc2024-20260710-en
16 signatures
150 seconds
Behavioral task
behavioral3
Sample
2.Patcher.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 1.CineDream.msi
- Size 254.7MB
- SHA256 f61552e389a1c68cab6f2ab357c99675819fc9ebdb0c490e1f78e33cf8da3cf8
- MD5 954137cb9b78e493b98c59454e661b37
- SHA1 2c2af8577f62d0a9c9f36eb28312dfbb95fae6a5
- SHA512 43e75db70f0d15578de24695219062eabda1782bb6fe38e261c19b94de35d04b6d404ad88a6dafb4880981c87d5b94de5cf9c73b4afeb792bad48e8f948c17cf
- SSDEEP 6291456:JViJ5TKVNzdsKYSYmDa1yf8IqZTjIIUa8R:nQ5mdLx8IoT9S
- TLSH T14DD83366BB8CC985E6D3163AC4C74F6A9CB66C10B71442679A79F81DCC323C83F62752
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Loads dropped DLL
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target 2.Patcher.exe
- Size 15.9MB
- SHA256 5b2b098e49e0cc9399d0ddbde74ed08039f15af4d9c6a7ace244ab940635a2b2
- MD5 799129826447182c847e6c74df32a7bd
- SHA1 8d705ac441fb830f01bb6d2236204c0bc6a216e2
- SHA512 1f522ceb4056300cbface968142964d4148674252520b23c15525d51aa61c2ce414f461d956de95731e15ae4632454242ca27ae81157fe694ddd8dc0fc5ebe60
- SSDEEP 393216:9oQfbZw0bBvzBBhE5jvN18CqBdOz31WtyHR+2tp3eXx:7fbRBzfh+MCqO30QpW
- TLSH T1DDF63337B28A633EE46A5A374AF2D6001C3BBA51A01F8C5697F44C4CDF2A1A11D7E753
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE