Overview

overview

10

Static

static

10

6030b798d3...5N.exe

windows7-x64

10

6030b798d3...5N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6030b798d38d84e2b2243f0f029e65f0c17730752e0d374f872366c78a7f7c25N

  • Size

    824KB

  • Sample

    241025-3qgcraxerq

  • MD5

    db7197477f25ff30e8b1701e044e9ec0

  • SHA1

    74a62106435bf14cf789ce48eae643f5e861049c

  • SHA256

    6030b798d38d84e2b2243f0f029e65f0c17730752e0d374f872366c78a7f7c25

  • SHA512

    67a9529b7d3dd39d61c038717b2342c3eaacf08e128f27dd7dfc6b630f2657139f472edee7a0379f30f8e7d2b4773529b274f5f380153592ee7837eba502d22b

  • SSDEEP

    12288:AwCBtLC+EptUpQ9SeSChq3YvxFBSSRMT8PTp4ihozEn888888888888W8888888J:wNzCtUpQ9WWPBSSRMTEpXNT

Score
10/10
renamerdiscoveryworm

Malware Config

Targets

    • Target

      6030b798d38d84e2b2243f0f029e65f0c17730752e0d374f872366c78a7f7c25N

    • Size

      824KB

    • MD5

      db7197477f25ff30e8b1701e044e9ec0

    • SHA1

      74a62106435bf14cf789ce48eae643f5e861049c

    • SHA256

      6030b798d38d84e2b2243f0f029e65f0c17730752e0d374f872366c78a7f7c25

    • SHA512

      67a9529b7d3dd39d61c038717b2342c3eaacf08e128f27dd7dfc6b630f2657139f472edee7a0379f30f8e7d2b4773529b274f5f380153592ee7837eba502d22b

    • SSDEEP

      12288:AwCBtLC+EptUpQ9SeSChq3YvxFBSSRMT8PTp4ihozEn888888888888W8888888J:wNzCtUpQ9WWPBSSRMTEpXNT

    Score
    10/10
    renamerdiscoveryworm

    • Detects Renamer worm.

      Renamer aka Grename is worm written in Delphi.

    • Renamer family

      renamer

    • Renamer, Grenam

      Renamer aka Grenam is a worm written in Delphi.

      wormrenamer

    • Drops startup file

    • Loads dropped DLL

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks