General

  • Target

    b0869e70710cd7baac222fbeb2dd62f2c6905cd883a24c179f414e18975183f7

  • Size

    824KB

  • Sample

    241020-bhnnbasalp

  • MD5

    c9c6d41f35e2deb4e68ad4b5b44af28a

  • SHA1

    ead614f74bc3e796eeab98b22c8693497efe30bc

  • SHA256

    b0869e70710cd7baac222fbeb2dd62f2c6905cd883a24c179f414e18975183f7

  • SHA512

    c9de856b1fc480103319576953fa8c3ae004d6581a7e0f2394e190d3dd421e6083663c8321ae565940d15ee1ed7711624b6f66b84ff2e87d94a10e056a9ce597

  • SSDEEP

    12288:GwCBtLC+EptUpQ9SeSChq3YvxFBSSRMT8PTp4ihozEZ888888888888W8888888J:GNzCtUpQ9WWPBSSRMTEpXNJ

Score
10/10

Malware Config

Targets

    • Target

      b0869e70710cd7baac222fbeb2dd62f2c6905cd883a24c179f414e18975183f7

    • Size

      824KB

    • MD5

      c9c6d41f35e2deb4e68ad4b5b44af28a

    • SHA1

      ead614f74bc3e796eeab98b22c8693497efe30bc

    • SHA256

      b0869e70710cd7baac222fbeb2dd62f2c6905cd883a24c179f414e18975183f7

    • SHA512

      c9de856b1fc480103319576953fa8c3ae004d6581a7e0f2394e190d3dd421e6083663c8321ae565940d15ee1ed7711624b6f66b84ff2e87d94a10e056a9ce597

    • SSDEEP

      12288:GwCBtLC+EptUpQ9SeSChq3YvxFBSSRMT8PTp4ihozEZ888888888888W8888888J:GNzCtUpQ9WWPBSSRMTEpXNJ

    Score
    10/10
    • Detects Renamer worm.

      Renamer aka Grename is worm written in Delphi.

    • Renamer, Grenam

      Renamer aka Grenam is a worm written in Delphi.

    • Drops startup file

    • Loads dropped DLL

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

MITRE ATT&CK Enterprise v15

Tasks