Overview

overview

10

Static

static

10

fd92481886...aN.exe

windows7-x64

10

fd92481886...aN.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fd92481886d8b8f5cd7091940c77862020a0dcb6ace214d511ce1aad4e7eba9aN

  • Size

    824KB

  • Sample

    241101-ran7wa1eqb

  • MD5

    80e4aeb85231606fe5a1d2558f5b1650

  • SHA1

    0ed66b186ada5fb18d67272a57ee7268af16ffb3

  • SHA256

    fd92481886d8b8f5cd7091940c77862020a0dcb6ace214d511ce1aad4e7eba9a

  • SHA512

    f21039dc1f3be4ec1a71ef7b1c6254d744a5cbb575ee3ac3a5a6908685a239f16bcbb96027f5d7688cd7aaa39edf30642e982070a5722ef1dbdd3cc6bb8d02bc

  • SSDEEP

    12288:OwCBtLC+EptUpQ9SeSChq3YvxFBSSRMT8PTp4ihozEH888888888888W8888888J:eNzCtUpQ9WWPBSSRMTEpXNz

Score
10/10
renamerdiscoveryworm

Malware Config

Targets

    • Target

      fd92481886d8b8f5cd7091940c77862020a0dcb6ace214d511ce1aad4e7eba9aN

    • Size

      824KB

    • MD5

      80e4aeb85231606fe5a1d2558f5b1650

    • SHA1

      0ed66b186ada5fb18d67272a57ee7268af16ffb3

    • SHA256

      fd92481886d8b8f5cd7091940c77862020a0dcb6ace214d511ce1aad4e7eba9a

    • SHA512

      f21039dc1f3be4ec1a71ef7b1c6254d744a5cbb575ee3ac3a5a6908685a239f16bcbb96027f5d7688cd7aaa39edf30642e982070a5722ef1dbdd3cc6bb8d02bc

    • SSDEEP

      12288:OwCBtLC+EptUpQ9SeSChq3YvxFBSSRMT8PTp4ihozEH888888888888W8888888J:eNzCtUpQ9WWPBSSRMTEpXNz

    Score
    10/10
    renamerdiscoveryworm

    • Detects Renamer worm.

      Renamer aka Grename is worm written in Delphi.

    • Renamer family

      renamer

    • Renamer, Grenam

      Renamer aka Grenam is a worm written in Delphi.

      wormrenamer

    • Drops startup file

    • Loads dropped DLL

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks