Overview

overview

10

Static

static

10

690fcb0229...3N.exe

windows7-x64

10

690fcb0229...3N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    690fcb0229f15e10b68af3471f0ffec55c69ac0d45c80e4d00e33c84c0299653N

  • Size

    824KB

  • Sample

    241021-188hvasbnm

  • MD5

    1fa910733ea137f608074ad64cf53040

  • SHA1

    497365a3438d6c761665ed0fa7eccf69cc174d64

  • SHA256

    690fcb0229f15e10b68af3471f0ffec55c69ac0d45c80e4d00e33c84c0299653

  • SHA512

    6363a093ec7972fc37a60bd508cdd5414d27ef97bd8b6a1e8091a654c079235430ce45a00e8fa0bb683fd89ae2b88c7657aad91c8aa43e23363af3c2eaaff02d

  • SSDEEP

    12288:hwCBtLC+EptUpQ9SeSChq3YvxFBSSRMT8PTp4AhozE5E888888888888W888888E:lNzCtUpQ9WWPBSSRMTEptN5W

Score
10/10
renamerdiscoveryworm

Malware Config

Targets

    • Target

      690fcb0229f15e10b68af3471f0ffec55c69ac0d45c80e4d00e33c84c0299653N

    • Size

      824KB

    • MD5

      1fa910733ea137f608074ad64cf53040

    • SHA1

      497365a3438d6c761665ed0fa7eccf69cc174d64

    • SHA256

      690fcb0229f15e10b68af3471f0ffec55c69ac0d45c80e4d00e33c84c0299653

    • SHA512

      6363a093ec7972fc37a60bd508cdd5414d27ef97bd8b6a1e8091a654c079235430ce45a00e8fa0bb683fd89ae2b88c7657aad91c8aa43e23363af3c2eaaff02d

    • SSDEEP

      12288:hwCBtLC+EptUpQ9SeSChq3YvxFBSSRMT8PTp4AhozE5E888888888888W888888E:lNzCtUpQ9WWPBSSRMTEptN5W

    Score
    10/10
    renamerdiscoveryworm

    • Detects Renamer worm.

      Renamer aka Grename is worm written in Delphi.

    • Renamer, Grenam

      Renamer aka Grenam is a worm written in Delphi.

      wormrenamer

    • Drops startup file

    • Loads dropped DLL

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks