home

the_cranberries_dreams.exe

The executable the_cranberries_dreams.exe has been detected as malware by 1 anti-virus scanner. This is a setup program which is used to install the application. The file has been seen being downloaded from a.groupparent.xyz.
MD5:
e58c418a769a3e9344a011e4574873d6

SHA-1:
0d4311d29a417aaffcfeab024381ff1f7ba4f957

SHA-256:
c0a578c3cf05631a0d528be865ca07c779b8dfcd2c670ec7b8299219f0309244

Scanner detections:
1 / 68

Status:
Malware

Analysis date:
2/25/2025 7:53:53 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
Threat.Win.Reputation.IMP
16.6.27.12

File size:
2.4 MB (2,477,568 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\the_cranberries_dreams.exe

File PE Metadata
Compilation timestamp:
7/12/2012 3:01:45 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
6144:7dAJKC/p+e8yO7QtBdtYdxy9bmViSVpbUWl21rb2:SDAn57QtBday9yVeAib2

Entry address:
0x2147F8

Entry point:
E8, 57, 12, 00, 00, E9, 00, 00, 00, 00, 6A, 14, 68, 50, 26, 64, 00, E8, 62, 17, 00, 00, E8, 24, 14, 00, 00, 0F, B7, F0, 6A, 02, E8, EA, 11, 00, 00, 59, B8, 4D, 5A, 00, 00, 66, 39, 05, 00, 00, 40, 00, 74, 04, 33, DB, EB, 33, A1, 3C, 00, 40, 00, 81, B8, 00, 00, 40, 00, 50, 45, 00, 00, 75, EB, B9, 0B, 01, 00, 00, 66, 39, 88, 18, 00, 40, 00, 75, DD, 33, DB, 83, B8, 74, 00, 40, 00, 0E, 76, 09, 39, 98, E8, 00, 40, 00, 0F, 95, C3, 89, 5D, E4, E8, CB, 0B, 00, 00, 85, C0, 75, 08, 6A, 1C, E8, DC, 00, 00, 00, 59, E8...
 
[+]

Code size:
2.1 MB (2,202,112 bytes)

The file the_cranberries_dreams.exe has been seen being distributed by the following URL.

http://a.groupparent.xyz/hp/?q=K//L5AYSp56ajDWYSULMYX UdXL/wWk/4lzhxodjgMGBg05/fuifXrV05HZnawiKUlI5FcAcJbg33E1JwX4SDkBd2IUxBIdmnBqDRCPjLp3ePWPPExOaFbb7nd509z/0XJtU06W98oe8/svBuXae v3NWd3n7uCCZriqtyLdKC5RWN5R1ynRbi3utRNLQPLjZ 3U/TJKZMsFa33l MCOLUio78N4IdRwzJrmjiHY9cgAAGWo/oE9D0pxv 7mAWMIfWHC3zLF9qb1sK1mStUbzlIxHzkIDlDZ/bn9wOwKEsMD1rfxA4EXHO65zjvg7Pqc/4XXGbiu8vLLJMkq4 DqLVVMfGcVNY1gwElWzH5FT0yir9sOsJER9O05/fj941cRH9QOT/ZPJbD6po ycSSdcNPQjoArRIdh/5bbaN6DXXrMuubvhkst1LDp7bT4mJLgsQBw9 5sd8UvB2DJZtpHF8KYh9IR/x9wGma3olg0u3PfseofZNEN5Q3ugib0th8xDBSI63CQsrmMFtcI6YGPqTrwyI2u4Jn8xp9cj9/h5PPbjjpkwROuuj7S7wTiXB5RwjF buNN7C16bVXgvga0Rz6k9qjwW72B0RcEt5VSC2Fa9nWmicvTJFEypmM7k3Es94BYsodRWk/SeQ2AzL/.../d81tSv&external_id=1433646480711838569&uuid=CzGzyJpJYbzfE0d6vPy6FtZloNUi5G

Remove the_cranberries_dreams.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.