Overview

overview

10

Static

static

10

08caa3f6f5...18.exe

windows7-x64

10

08caa3f6f5...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    08caa3f6f58d9871b2f199bfdfd1096e_JaffaCakes118

  • Size

    824KB

  • Sample

    241002-ene5xaweqm

  • MD5

    08caa3f6f58d9871b2f199bfdfd1096e

  • SHA1

    11e6b3ae62ccd2af0c4b38cd4d507e4b408b337b

  • SHA256

    a69e0fdb81e97e6e66a98b7ac2b978dd8320e912d01229a667609a629cbba1f9

  • SHA512

    9239d8d166c9c397dac205abf5f151d23452b161efdba6f34a168bc21d093894de2e8012228494249689d9bb3193c5d0941d7902e88dbad1b290d722dac933c1

  • SSDEEP

    12288:bwCBtLC+EptUpQ9SeSChq3YvxFBSSRMT8PTp4ihozE3888888888888W8888888J:nNzCtUpQ9WWPBSSRMTEpXNj

Score
10/10
renamerdiscoveryworm

Malware Config

Targets

    • Target

      08caa3f6f58d9871b2f199bfdfd1096e_JaffaCakes118

    • Size

      824KB

    • MD5

      08caa3f6f58d9871b2f199bfdfd1096e

    • SHA1

      11e6b3ae62ccd2af0c4b38cd4d507e4b408b337b

    • SHA256

      a69e0fdb81e97e6e66a98b7ac2b978dd8320e912d01229a667609a629cbba1f9

    • SHA512

      9239d8d166c9c397dac205abf5f151d23452b161efdba6f34a168bc21d093894de2e8012228494249689d9bb3193c5d0941d7902e88dbad1b290d722dac933c1

    • SSDEEP

      12288:bwCBtLC+EptUpQ9SeSChq3YvxFBSSRMT8PTp4ihozE3888888888888W8888888J:nNzCtUpQ9WWPBSSRMTEpXNj

    Score
    10/10
    renamerdiscoveryworm

    • Detects Renamer worm.

      Renamer aka Grename is worm written in Delphi.

    • Renamer, Grenam

      Renamer aka Grenam is a worm written in Delphi.

      wormrenamer

    • Drops startup file

    • Loads dropped DLL

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks