Overview

overview

10

Static

static

10

b5910ff11b...2N.exe

windows7-x64

10

b5910ff11b...2N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b5910ff11b3a4f3b7b9df9f265deb30cc5587f875349090e3e4051dc9435b9b2N

  • Size

    824KB

  • Sample

    240918-bmal9avcre

  • MD5

    bda4f968e04ccdbbc23377844976ca60

  • SHA1

    dee70e4f60c8905f0d9f94fc1a77cbe31bee71ae

  • SHA256

    b5910ff11b3a4f3b7b9df9f265deb30cc5587f875349090e3e4051dc9435b9b2

  • SHA512

    5f251d3587b3f0026209c7599f6c34e9cb5eb97e512f5d1a63f826b9d5bf2ddee787bae9596dda60104e746bac0f20c270c0e83f411021d2e7a7057d4dd7cf2c

  • SSDEEP

    12288:CwCBtLC+EptUpQ9SeSChq3YvxFBSSRMT8PTp4ihozEk888888888888W8888888J:yNzCtUpQ9WWPBSSRMTEpXN2

Score
10/10
renamerdiscoveryworm

Malware Config

Targets

    • Target

      b5910ff11b3a4f3b7b9df9f265deb30cc5587f875349090e3e4051dc9435b9b2N

    • Size

      824KB

    • MD5

      bda4f968e04ccdbbc23377844976ca60

    • SHA1

      dee70e4f60c8905f0d9f94fc1a77cbe31bee71ae

    • SHA256

      b5910ff11b3a4f3b7b9df9f265deb30cc5587f875349090e3e4051dc9435b9b2

    • SHA512

      5f251d3587b3f0026209c7599f6c34e9cb5eb97e512f5d1a63f826b9d5bf2ddee787bae9596dda60104e746bac0f20c270c0e83f411021d2e7a7057d4dd7cf2c

    • SSDEEP

      12288:CwCBtLC+EptUpQ9SeSChq3YvxFBSSRMT8PTp4ihozEk888888888888W8888888J:yNzCtUpQ9WWPBSSRMTEpXN2

    Score
    10/10
    renamerdiscoveryworm

    • Detects Renamer worm.

      Renamer aka Grename is worm written in Delphi.

    • Renamer, Grenam

      Renamer aka Grenam is a worm written in Delphi.

      wormrenamer

    • Drops startup file

    • Loads dropped DLL

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks