Overview

overview

10

Static

static

3

993cd5d33a...7N.exe

windows7-x64

10

993cd5d33a...7N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    993cd5d33ab87257e4d2b3acccc7ba08aa9b0a7d42f0ac9436435a78278556c7N

  • Size

    1.2MB

  • Sample

    240930-c1v1saxfrc

  • MD5

    097334fb3b187c832a87b1971301a280

  • SHA1

    6482faf478b72d4baf1ab3ec8744ec6b1c3b7285

  • SHA256

    993cd5d33ab87257e4d2b3acccc7ba08aa9b0a7d42f0ac9436435a78278556c7

  • SHA512

    0d59b2fb4a2e67f607d92870526be46740d6733dbf875d4611a59bb3b71ff913bc46988339fc420a7e94a67bf3b4b2fbcd4a1578668e01b615dfa1f10a2c0c8f

  • SSDEEP

    24576:slbejZiovaq2DycK2fFK6eZYZyuIoTWnWYM9Mwt3m:nZiovd2G8FKjZwu1nWG

Score
10/10
renamerdiscoveryworm

Malware Config

Targets

    • Target

      993cd5d33ab87257e4d2b3acccc7ba08aa9b0a7d42f0ac9436435a78278556c7N

    • Size

      1.2MB

    • MD5

      097334fb3b187c832a87b1971301a280

    • SHA1

      6482faf478b72d4baf1ab3ec8744ec6b1c3b7285

    • SHA256

      993cd5d33ab87257e4d2b3acccc7ba08aa9b0a7d42f0ac9436435a78278556c7

    • SHA512

      0d59b2fb4a2e67f607d92870526be46740d6733dbf875d4611a59bb3b71ff913bc46988339fc420a7e94a67bf3b4b2fbcd4a1578668e01b615dfa1f10a2c0c8f

    • SSDEEP

      24576:slbejZiovaq2DycK2fFK6eZYZyuIoTWnWYM9Mwt3m:nZiovd2G8FKjZwu1nWG

    Score
    10/10
    renamerdiscoveryworm

    • Detects Renamer worm.

      Renamer aka Grename is worm written in Delphi.

    • Renamer, Grenam

      Renamer aka Grenam is a worm written in Delphi.

      wormrenamer

    • Drops startup file

    • Loads dropped DLL

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks