Overview

overview

10

Static

static

10

2c3ebe2e52...6f.exe

windows7-x64

10

2c3ebe2e52...6f.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    2c3ebe2e52c14c0a89c69ee1eaabad4303226c8243479469ac8c7594ba68cd6f

  • Size

    854KB

  • Sample

    241102-cxdmbswnbz

  • MD5

    0e5d103da9d6ea8bedb36618c11780d2

  • SHA1

    0212b901da61d5bb28851602cb9511caf863ed74

  • SHA256

    2c3ebe2e52c14c0a89c69ee1eaabad4303226c8243479469ac8c7594ba68cd6f

  • SHA512

    223d3a5ad2317b1f128af70489834ff34a883188f8335dc8e39a1e015ff02cf59b266c3a8f69b4d13ac9151ab375fe287b231900f10ed5ec06c8552db3196a9b

  • SSDEEP

    12288:FwCBtLC+EptUpQ9SeSChq3YvxFBSSRMT8PTp4ihozEo888888888888W8888888X:pNzCtUpQ9WWPBSSRMTEpXN

Score
10/10
renamerdiscoveryworm

Malware Config

Targets

    • Target

      2c3ebe2e52c14c0a89c69ee1eaabad4303226c8243479469ac8c7594ba68cd6f

    • Size

      854KB

    • MD5

      0e5d103da9d6ea8bedb36618c11780d2

    • SHA1

      0212b901da61d5bb28851602cb9511caf863ed74

    • SHA256

      2c3ebe2e52c14c0a89c69ee1eaabad4303226c8243479469ac8c7594ba68cd6f

    • SHA512

      223d3a5ad2317b1f128af70489834ff34a883188f8335dc8e39a1e015ff02cf59b266c3a8f69b4d13ac9151ab375fe287b231900f10ed5ec06c8552db3196a9b

    • SSDEEP

      12288:FwCBtLC+EptUpQ9SeSChq3YvxFBSSRMT8PTp4ihozEo888888888888W8888888X:pNzCtUpQ9WWPBSSRMTEpXN

    Score
    10/10
    renamerdiscoveryworm

    • Detects Renamer worm.

      Renamer aka Grename is worm written in Delphi.

    • Renamer family

      renamer

    • Renamer, Grenam

      Renamer aka Grenam is a worm written in Delphi.

      wormrenamer

    • Drops startup file

    • Loads dropped DLL

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks