Overview

overview

10

Static

static

10

94967b2ee5...2N.exe

windows7-x64

10

94967b2ee5...2N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    94967b2ee56bc5ce6329d6d6589e8dd308f311315da1444bf45edcd4f1149f52N

  • Size

    824KB

  • Sample

    241009-etqtlazbka

  • MD5

    bb8e1f644a258bd671aee04d23693dc0

  • SHA1

    e96c57ba7313de28aec705aab2b85bc28a877b66

  • SHA256

    94967b2ee56bc5ce6329d6d6589e8dd308f311315da1444bf45edcd4f1149f52

  • SHA512

    d6ed183d1f195fb42d303be3a2f64ead9590b6b92973e5832cbf5c44c12f835caccb8503285fd4162a3428662c16dd1cb94e6fc244c3577f56eb7eac2ebd4fa6

  • SSDEEP

    12288:GwCBtLC+EptUpQ9SeSChq3YvxFBSSRMT8PTp4ihozEs888888888888W8888888J:GNzCtUpQ9WWPBSSRMTEpXN+

Score
10/10
renamerdiscoveryworm

Malware Config

Targets

    • Target

      94967b2ee56bc5ce6329d6d6589e8dd308f311315da1444bf45edcd4f1149f52N

    • Size

      824KB

    • MD5

      bb8e1f644a258bd671aee04d23693dc0

    • SHA1

      e96c57ba7313de28aec705aab2b85bc28a877b66

    • SHA256

      94967b2ee56bc5ce6329d6d6589e8dd308f311315da1444bf45edcd4f1149f52

    • SHA512

      d6ed183d1f195fb42d303be3a2f64ead9590b6b92973e5832cbf5c44c12f835caccb8503285fd4162a3428662c16dd1cb94e6fc244c3577f56eb7eac2ebd4fa6

    • SSDEEP

      12288:GwCBtLC+EptUpQ9SeSChq3YvxFBSSRMT8PTp4ihozEs888888888888W8888888J:GNzCtUpQ9WWPBSSRMTEpXN+

    Score
    10/10
    renamerdiscoveryworm

    • Detects Renamer worm.

      Renamer aka Grename is worm written in Delphi.

    • Renamer, Grenam

      Renamer aka Grenam is a worm written in Delphi.

      wormrenamer

    • Drops startup file

    • Loads dropped DLL

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks