Overview

overview

10

Static

static

10

e9a41a903f...c8.exe

windows7-x64

10

e9a41a903f...c8.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e9a41a903f404d61f27ae9a72083329aa988b6d06ab8ff82c12b58eaeb1e8cc8

  • Size

    824KB

  • Sample

    240927-dag7nsvajh

  • MD5

    dc2e74bc1f6008e288f5b0b20a2f5347

  • SHA1

    116efc12e9d286ef75521ec16f1b8bb72cdf2278

  • SHA256

    e9a41a903f404d61f27ae9a72083329aa988b6d06ab8ff82c12b58eaeb1e8cc8

  • SHA512

    c1c46cd2106e6a4d7750eef5d3b916b84cbced069f0ff3ebf0d7c9e6b9a7b3e17f33caf00b4a8ce54e37c22858eb78cb06fee8dcd8a790639d459e17710279aa

  • SSDEEP

    12288:AwCBtLC+EptUpQ9SeSChq3YvxFBSSRMT8PTp4ihozEH888888888888W8888888J:wNzCtUpQ9WWPBSSRMTEpXNz

Score
10/10
renamerdiscoveryworm

Malware Config

Targets

    • Target

      e9a41a903f404d61f27ae9a72083329aa988b6d06ab8ff82c12b58eaeb1e8cc8

    • Size

      824KB

    • MD5

      dc2e74bc1f6008e288f5b0b20a2f5347

    • SHA1

      116efc12e9d286ef75521ec16f1b8bb72cdf2278

    • SHA256

      e9a41a903f404d61f27ae9a72083329aa988b6d06ab8ff82c12b58eaeb1e8cc8

    • SHA512

      c1c46cd2106e6a4d7750eef5d3b916b84cbced069f0ff3ebf0d7c9e6b9a7b3e17f33caf00b4a8ce54e37c22858eb78cb06fee8dcd8a790639d459e17710279aa

    • SSDEEP

      12288:AwCBtLC+EptUpQ9SeSChq3YvxFBSSRMT8PTp4ihozEH888888888888W8888888J:wNzCtUpQ9WWPBSSRMTEpXNz

    Score
    10/10
    renamerdiscoveryworm

    • Detects Renamer worm.

      Renamer aka Grename is worm written in Delphi.

    • Renamer, Grenam

      Renamer aka Grenam is a worm written in Delphi.

      wormrenamer

    • Drops startup file

    • Loads dropped DLL

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks