Overview

overview

10

Static

static

10

d2cea7e464...cN.exe

windows7-x64

10

d2cea7e464...cN.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d2cea7e464449aa5ba64cf90c7d8a363dab1a764ef9bc6a02b0f7c2a35570d4cN

  • Size

    824KB

  • Sample

    240928-s8rakatdkj

  • MD5

    630c2d887678315c233727ededc1ba80

  • SHA1

    2aef94d72a44a0e99fd30513a4fa6c4af204ff2d

  • SHA256

    d2cea7e464449aa5ba64cf90c7d8a363dab1a764ef9bc6a02b0f7c2a35570d4c

  • SHA512

    dd45f3fb1e4ff08c2ee5ab71fab5f5599ae7b5b9a8b11043e2656392bfc33aa7fed7ddb790aee5f0bd467a0cb1dc80240e53f366530d05d97fb845013465eea0

  • SSDEEP

    12288:jwCBtLC+EptUpQ9SeSChq3YvxFBSSRMT8PTp4ihozEI888888888888W8888888J:/NzCtUpQ9WWPBSSRMTEpXNi

Score
10/10
renamerdiscoveryworm

Malware Config

Targets

    • Target

      d2cea7e464449aa5ba64cf90c7d8a363dab1a764ef9bc6a02b0f7c2a35570d4cN

    • Size

      824KB

    • MD5

      630c2d887678315c233727ededc1ba80

    • SHA1

      2aef94d72a44a0e99fd30513a4fa6c4af204ff2d

    • SHA256

      d2cea7e464449aa5ba64cf90c7d8a363dab1a764ef9bc6a02b0f7c2a35570d4c

    • SHA512

      dd45f3fb1e4ff08c2ee5ab71fab5f5599ae7b5b9a8b11043e2656392bfc33aa7fed7ddb790aee5f0bd467a0cb1dc80240e53f366530d05d97fb845013465eea0

    • SSDEEP

      12288:jwCBtLC+EptUpQ9SeSChq3YvxFBSSRMT8PTp4ihozEI888888888888W8888888J:/NzCtUpQ9WWPBSSRMTEpXNi

    Score
    10/10
    renamerdiscoveryworm

    • Detects Renamer worm.

      Renamer aka Grename is worm written in Delphi.

    • Renamer, Grenam

      Renamer aka Grenam is a worm written in Delphi.

      wormrenamer

    • Drops startup file

    • Loads dropped DLL

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks