Overview

overview

10

Static

static

10

766642fe23...7N.exe

windows7-x64

10

766642fe23...7N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    766642fe23a587547a840a63e91131308aa94a98a52bc345d4d7536e62b1ed47N

  • Size

    822KB

  • Sample

    241005-v2hqysseqg

  • MD5

    408f9bfd452c81c3b4009447c87e9d70

  • SHA1

    2a40f2ca80476f97eda9691711eac4655a7880fe

  • SHA256

    766642fe23a587547a840a63e91131308aa94a98a52bc345d4d7536e62b1ed47

  • SHA512

    13e2d80424278363f280a7670fbd3ff4f45b8b580d54b7da798b9f38fc7275c78a366f8fa6a15e9f488b3c1d8fd9893d026076f8f608526a4f52be849ab09064

  • SSDEEP

    12288:wwCBtLC+EptUpQ9SeSChq3YvxFBSSRMT8PTp4ihozE/888888888888W8888888J:gNzCtUpQ9WWPBSSRMTEpXNL

Score
10/10
renamerdiscoveryworm

Malware Config

Targets

    • Target

      766642fe23a587547a840a63e91131308aa94a98a52bc345d4d7536e62b1ed47N

    • Size

      822KB

    • MD5

      408f9bfd452c81c3b4009447c87e9d70

    • SHA1

      2a40f2ca80476f97eda9691711eac4655a7880fe

    • SHA256

      766642fe23a587547a840a63e91131308aa94a98a52bc345d4d7536e62b1ed47

    • SHA512

      13e2d80424278363f280a7670fbd3ff4f45b8b580d54b7da798b9f38fc7275c78a366f8fa6a15e9f488b3c1d8fd9893d026076f8f608526a4f52be849ab09064

    • SSDEEP

      12288:wwCBtLC+EptUpQ9SeSChq3YvxFBSSRMT8PTp4ihozE/888888888888W8888888J:gNzCtUpQ9WWPBSSRMTEpXNL

    Score
    10/10
    renamerdiscoveryworm

    • Detects Renamer worm.

      Renamer aka Grename is worm written in Delphi.

    • Renamer, Grenam

      Renamer aka Grenam is a worm written in Delphi.

      wormrenamer

    • Drops startup file

    • Loads dropped DLL

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks