Overview

overview

10

Static

static

10

3f0804c202...7f.exe

windows7-x64

10

3f0804c202...7f.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3f0804c202221829e3dbf551a44a1e2963fe9edae3d9682f95613bbb3b45617f

  • Size

    824KB

  • Sample

    241018-zrxvcaxhka

  • MD5

    a35a193808bc83dc67a92d93f327f048

  • SHA1

    a746c31ecaca3c0f8cb6cd12a94e2eb278059411

  • SHA256

    3f0804c202221829e3dbf551a44a1e2963fe9edae3d9682f95613bbb3b45617f

  • SHA512

    c609a0199d1d51935637ea6719aebc4d18a7b0b2f46ab1104c9d99bd5f51b49b9ab271b588201d90ad1b751479c0f7832b42643f3489cff648660cc54dcce1a0

  • SSDEEP

    12288:cwCBtLC+EptUpQ9SeSChq3YvxFBSSRMT8PTp4MhozE1888888888888W8888888J:cNzCtUpQ9WWPBSSRMTEpBNt

Score
10/10
renamerdiscoveryworm

Malware Config

Targets

    • Target

      3f0804c202221829e3dbf551a44a1e2963fe9edae3d9682f95613bbb3b45617f

    • Size

      824KB

    • MD5

      a35a193808bc83dc67a92d93f327f048

    • SHA1

      a746c31ecaca3c0f8cb6cd12a94e2eb278059411

    • SHA256

      3f0804c202221829e3dbf551a44a1e2963fe9edae3d9682f95613bbb3b45617f

    • SHA512

      c609a0199d1d51935637ea6719aebc4d18a7b0b2f46ab1104c9d99bd5f51b49b9ab271b588201d90ad1b751479c0f7832b42643f3489cff648660cc54dcce1a0

    • SSDEEP

      12288:cwCBtLC+EptUpQ9SeSChq3YvxFBSSRMT8PTp4MhozE1888888888888W8888888J:cNzCtUpQ9WWPBSSRMTEpBNt

    Score
    10/10
    renamerdiscoveryworm

    • Detects Renamer worm.

      Renamer aka Grename is worm written in Delphi.

    • Renamer, Grenam

      Renamer aka Grenam is a worm written in Delphi.

      wormrenamer

    • Drops startup file

    • Loads dropped DLL

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks