Overview

overview

10

Static

static

10

ff3cd2b036...05.exe

windows7-x64

10

ff3cd2b036...05.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ff3cd2b03651a1c2e74be3b393da401685c48a3d76824764a17d8abcc9e10105

  • Size

    824KB

  • Sample

    241011-fv6f4sscnq

  • MD5

    0d07ab202a475af9e8d84abdd198dcb5

  • SHA1

    5017348ce3fe9ecab6f7c4a583be2dad9f2f98c8

  • SHA256

    ff3cd2b03651a1c2e74be3b393da401685c48a3d76824764a17d8abcc9e10105

  • SHA512

    a0707311cc516eb70936eb388261f0019499618b18ca0a12e58c549a66848164f77233629041833bf77e8374e82903140dd7eb2a4be35daf259ee945fb6391ba

  • SSDEEP

    12288:CwCBtLC+EptUpQ9SeSChq3YvxFBSSRMT8PTp4ihozE8888888888888W8888888J:yNzCtUpQ9WWPBSSRMTEpXNO

Score
10/10
renamerdiscoveryworm

Malware Config

Targets

    • Target

      ff3cd2b03651a1c2e74be3b393da401685c48a3d76824764a17d8abcc9e10105

    • Size

      824KB

    • MD5

      0d07ab202a475af9e8d84abdd198dcb5

    • SHA1

      5017348ce3fe9ecab6f7c4a583be2dad9f2f98c8

    • SHA256

      ff3cd2b03651a1c2e74be3b393da401685c48a3d76824764a17d8abcc9e10105

    • SHA512

      a0707311cc516eb70936eb388261f0019499618b18ca0a12e58c549a66848164f77233629041833bf77e8374e82903140dd7eb2a4be35daf259ee945fb6391ba

    • SSDEEP

      12288:CwCBtLC+EptUpQ9SeSChq3YvxFBSSRMT8PTp4ihozE8888888888888W8888888J:yNzCtUpQ9WWPBSSRMTEpXNO

    Score
    10/10
    renamerdiscoveryworm

    • Detects Renamer worm.

      Renamer aka Grename is worm written in Delphi.

    • Renamer, Grenam

      Renamer aka Grenam is a worm written in Delphi.

      wormrenamer

    • Drops startup file

    • Loads dropped DLL

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks