renamer | 4f5b54f6bc0cfad4267ddd0dc5dcb1e6ff81d778718e27b7e58c767d3bcb2d4e | Triage

Submit
Reports

Overview

overview

Static

static

4f5b54f6bc...4e.exe

windows7-x64

4f5b54f6bc...4e.exe

windows10-2004-x64

Sharing

General

Target

4f5b54f6bc0cfad4267ddd0dc5dcb1e6ff81d778718e27b7e58c767d3bcb2d4e
Size

824KB
Sample

240910-1eg4ssxfqe
MD5

5a7a688c39848df0d63e6314de8a2538
SHA1

07a0da08d1dd7edcc731e8a445d4e1233522a53b
SHA256

4f5b54f6bc0cfad4267ddd0dc5dcb1e6ff81d778718e27b7e58c767d3bcb2d4e
SHA512

529908bc1b9064bc19db3814909889c9b7a5cb4bf1827ad71d0c9278361e2e602cfa62e4fd7e455dabe3590ef2fc6b382955f02ff5525bb9bfc15e43926c3858
SSDEEP

12288:CwCBtLC+EptUpQ9SeSChq3YvxFBSSRMT8PTp4ihozEk888888888888W8888888J:yNzCtUpQ9WWPBSSRMTEpXN2

Score

10^/10

renamer discovery worm

Static task

static1

3 signatures

Behavioral task

behavioral1

Sample

4f5b54f6bc0cfad4267ddd0dc5dcb1e6ff81d778718e27b7e58c767d3bcb2d4e.exe

Resource

win7-20240903-en

renamer discovery worm

windows7-x64

9 signatures

150 seconds

Behavioral task

behavioral2

Sample

4f5b54f6bc0cfad4267ddd0dc5dcb1e6ff81d778718e27b7e58c767d3bcb2d4e.exe

Resource

win10v2004-20240802-en

renamer discovery worm

windows10-2004-x64

8 signatures

150 seconds

Malware Config

Targets

- Target
  
  4f5b54f6bc0cfad4267ddd0dc5dcb1e6ff81d778718e27b7e58c767d3bcb2d4e
- Size
  
  824KB
- MD5
  
  5a7a688c39848df0d63e6314de8a2538
- SHA1
  
  07a0da08d1dd7edcc731e8a445d4e1233522a53b
- SHA256
  
  4f5b54f6bc0cfad4267ddd0dc5dcb1e6ff81d778718e27b7e58c767d3bcb2d4e
- SHA512
  
  529908bc1b9064bc19db3814909889c9b7a5cb4bf1827ad71d0c9278361e2e602cfa62e4fd7e455dabe3590ef2fc6b382955f02ff5525bb9bfc15e43926c3858
- SSDEEP
  
  12288:CwCBtLC+EptUpQ9SeSChq3YvxFBSSRMT8PTp4ihozEk888888888888W8888888J:yNzCtUpQ9WWPBSSRMTEpXN2
Score

10^/10

renamer discovery worm
- Detects Renamer worm.
  Renamer aka Grename is worm written in Delphi.
- Renamer, Grenam
  Renamer aka Grenam is a worm written in Delphi.
  worm renamer
- Drops startup file
- Loads dropped DLL
- Drops autorun.inf file
  Malware can abuse Windows Autorun to spread further via attached volumes.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Replication Through Removable Media

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Replication Through Removable Media

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

renamerdiscoveryworm

behavioral2

renamerdiscoveryworm

© 2018-2025

Terms | Privacy