Overview

overview

10

Static

static

10

3bf0317247...8N.exe

windows7-x64

10

3bf0317247...8N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3bf0317247836abb79f9c9b7967653102dee3f788611ab8b9ee7ce92352e44e8N

  • Size

    824KB

  • Sample

    241103-315hbsxkg1

  • MD5

    66f7a2fb8b0c608eb5d908a77cf51de0

  • SHA1

    2562ea8b2dc94515766412c91fc1e1fa203abbde

  • SHA256

    3bf0317247836abb79f9c9b7967653102dee3f788611ab8b9ee7ce92352e44e8

  • SHA512

    0f30ade4417754034a3c64ac5dd47be94cefcbdc58eb76dd2b23d56c786ac194753de3165959b51cd3899273e9dc987c71bf52ea1138322ec9f8c08a090a796f

  • SSDEEP

    12288:AwCBtLC+EptUpQ9SeSChq3YvxFBSSRMT8PTp4ihozEt888888888888W8888888J:wNzCtUpQ9WWPBSSRMTEpXNl

Score
10/10
renamerdiscoveryworm

Malware Config

Targets

    • Target

      3bf0317247836abb79f9c9b7967653102dee3f788611ab8b9ee7ce92352e44e8N

    • Size

      824KB

    • MD5

      66f7a2fb8b0c608eb5d908a77cf51de0

    • SHA1

      2562ea8b2dc94515766412c91fc1e1fa203abbde

    • SHA256

      3bf0317247836abb79f9c9b7967653102dee3f788611ab8b9ee7ce92352e44e8

    • SHA512

      0f30ade4417754034a3c64ac5dd47be94cefcbdc58eb76dd2b23d56c786ac194753de3165959b51cd3899273e9dc987c71bf52ea1138322ec9f8c08a090a796f

    • SSDEEP

      12288:AwCBtLC+EptUpQ9SeSChq3YvxFBSSRMT8PTp4ihozEt888888888888W8888888J:wNzCtUpQ9WWPBSSRMTEpXNl

    Score
    10/10
    renamerdiscoveryworm

    • Detects Renamer worm.

      Renamer aka Grename is worm written in Delphi.

    • Renamer family

      renamer

    • Renamer, Grenam

      Renamer aka Grenam is a worm written in Delphi.

      wormrenamer

    • Drops startup file

    • Loads dropped DLL

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks