Overview

overview

10

Static

static

10

4a0307789f...dN.exe

windows7-x64

10

4a0307789f...dN.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4a0307789fcc9e442addd51748e312b4b50e8d97d17fdb8dcda394ab476d6e7dN

  • Size

    824KB

  • Sample

    241006-wk75ys1gpe

  • MD5

    b2b19b0fecc3fe9ba8fa053dfdc6b310

  • SHA1

    e394d74c6983595a0366c4f856dbc2cd534c691e

  • SHA256

    4a0307789fcc9e442addd51748e312b4b50e8d97d17fdb8dcda394ab476d6e7d

  • SHA512

    c359c75e815b89e07baa21e3e6b0d5f82f11a1d1be554cfd70d0882c7b9eb4128519f0fc04e36c8f414d390c87661948fa1fc569fba15e4c26e0ee7fa850022c

  • SSDEEP

    12288:UwCBtLC+EptUpQ9SeSChq3YvxFBSSRMT8PTp4ihozEEa888888888888W888888E:kNzCtUpQ9WWPBSSRMTEpXNV

Score
10/10
renamerdiscoveryworm

Malware Config

Targets

    • Target

      4a0307789fcc9e442addd51748e312b4b50e8d97d17fdb8dcda394ab476d6e7dN

    • Size

      824KB

    • MD5

      b2b19b0fecc3fe9ba8fa053dfdc6b310

    • SHA1

      e394d74c6983595a0366c4f856dbc2cd534c691e

    • SHA256

      4a0307789fcc9e442addd51748e312b4b50e8d97d17fdb8dcda394ab476d6e7d

    • SHA512

      c359c75e815b89e07baa21e3e6b0d5f82f11a1d1be554cfd70d0882c7b9eb4128519f0fc04e36c8f414d390c87661948fa1fc569fba15e4c26e0ee7fa850022c

    • SSDEEP

      12288:UwCBtLC+EptUpQ9SeSChq3YvxFBSSRMT8PTp4ihozEEa888888888888W888888E:kNzCtUpQ9WWPBSSRMTEpXNV

    Score
    10/10
    renamerdiscoveryworm

    • Detects Renamer worm.

      Renamer aka Grename is worm written in Delphi.

    • Renamer, Grenam

      Renamer aka Grenam is a worm written in Delphi.

      wormrenamer

    • Drops startup file

    • Loads dropped DLL

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks