Overview

overview

10

Static

static

10

e983ae2bad...6N.exe

windows7-x64

10

e983ae2bad...6N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e983ae2badd46403ea3572503786cab7709e72b503a6c6b95a0d36a0fb41a416N.exe

  • Size

    824KB

  • Sample

    240924-w7snsaybpp

  • MD5

    fcdb21fcaae8c9ea5aca0113df3f6b90

  • SHA1

    2c4b999371a947297cf93891087ac07785b4341a

  • SHA256

    e983ae2badd46403ea3572503786cab7709e72b503a6c6b95a0d36a0fb41a416

  • SHA512

    d59003eeb66b65fabc8573e7f3976a91237a080c9e95cff46f02049b47291e64c0d0b3581f1a6dbc23789db54456bb7e9378e8cdc718ddcc9c9775fb2291d7bb

  • SSDEEP

    12288:pwCBtLC+EptUpQ9SeSChq3YvxFBSSRMT8PTp4ihozEY888888888888W8888888J:dNzCtUpQ9WWPBSSRMTEpXNy

Score
10/10
renamerdiscoveryworm

Malware Config

Targets

    • Target

      e983ae2badd46403ea3572503786cab7709e72b503a6c6b95a0d36a0fb41a416N.exe

    • Size

      824KB

    • MD5

      fcdb21fcaae8c9ea5aca0113df3f6b90

    • SHA1

      2c4b999371a947297cf93891087ac07785b4341a

    • SHA256

      e983ae2badd46403ea3572503786cab7709e72b503a6c6b95a0d36a0fb41a416

    • SHA512

      d59003eeb66b65fabc8573e7f3976a91237a080c9e95cff46f02049b47291e64c0d0b3581f1a6dbc23789db54456bb7e9378e8cdc718ddcc9c9775fb2291d7bb

    • SSDEEP

      12288:pwCBtLC+EptUpQ9SeSChq3YvxFBSSRMT8PTp4ihozEY888888888888W8888888J:dNzCtUpQ9WWPBSSRMTEpXNy

    Score
    10/10
    renamerdiscoveryworm

    • Detects Renamer worm.

      Renamer aka Grename is worm written in Delphi.

    • Renamer, Grenam

      Renamer aka Grenam is a worm written in Delphi.

      wormrenamer

    • Drops startup file

    • Loads dropped DLL

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks