Overview

overview

10

Static

static

10

setup.exe

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    setup.exe

  • Size

    824KB

  • Sample

    241013-lzxbwsvgjk

  • MD5

    37b3c81fe4d8452787cb9b7fd63bff99

  • SHA1

    6ca920962866bd5d80a2798875b9c39a7d0e9282

  • SHA256

    32667ec585e2352db8837755fc2205d81078501391dfb28bc79b7572f6c23c44

  • SHA512

    2982a6ce28b01169d8b505d808fc14f63163442312746502d146dfdd15bcb0edffb91a5e9aa7ec1890da53b194505da0a694e40b6fd0c4b3d7039d1ba2367d99

  • SSDEEP

    12288:rwCBtLC+EptUpQ9SeSChq3YvxFBSSRMT8PTp4ihozEc888888888888W8888888J:3NzCtUpQ9WWPBSSRMTEpXNu

Score
10/10
renamerdiscoveryworm

Malware Config

Targets

    • Target

      setup.exe

    • Size

      824KB

    • MD5

      37b3c81fe4d8452787cb9b7fd63bff99

    • SHA1

      6ca920962866bd5d80a2798875b9c39a7d0e9282

    • SHA256

      32667ec585e2352db8837755fc2205d81078501391dfb28bc79b7572f6c23c44

    • SHA512

      2982a6ce28b01169d8b505d808fc14f63163442312746502d146dfdd15bcb0edffb91a5e9aa7ec1890da53b194505da0a694e40b6fd0c4b3d7039d1ba2367d99

    • SSDEEP

      12288:rwCBtLC+EptUpQ9SeSChq3YvxFBSSRMT8PTp4ihozEc888888888888W8888888J:3NzCtUpQ9WWPBSSRMTEpXNu

    Score
    10/10
    renamerdiscoveryworm

    • Detects Renamer worm.

      Renamer aka Grename is worm written in Delphi.

    • Renamer, Grenam

      Renamer aka Grenam is a worm written in Delphi.

      wormrenamer

    • Drops startup file

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks