Overview

overview

10

Static

static

10

c2804117e2...eN.exe

windows7-x64

10

c2804117e2...eN.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c2804117e22c3365d7f8cfb64278d6aaebc10bd84c13b1ed6ac5a8cf1d35b46eN

  • Size

    824KB

  • Sample

    241104-bb42qazdll

  • MD5

    dd5a93ebee364e9c431fb75c5c77e040

  • SHA1

    ec3e3162af7e487cb0a7da4cf0891b5547fbb711

  • SHA256

    c2804117e22c3365d7f8cfb64278d6aaebc10bd84c13b1ed6ac5a8cf1d35b46e

  • SHA512

    e547c993bc91f3d8c33e78faa947687195b7d7d61c3400401ed653ed01d40db57887192d4e9cd53a6c60f274f87c69f336a39d9da224f5a80601e50fd9475e29

  • SSDEEP

    12288:ZwCBtLC+EptUpQ9SeSChq3YvxFBSSRMT8PTp4ihozED888888888888W8888888J:NNzCtUpQ9WWPBSSRMTEpXNX

Score
10/10
renamerdiscoveryworm

Malware Config

Targets

    • Target

      c2804117e22c3365d7f8cfb64278d6aaebc10bd84c13b1ed6ac5a8cf1d35b46eN

    • Size

      824KB

    • MD5

      dd5a93ebee364e9c431fb75c5c77e040

    • SHA1

      ec3e3162af7e487cb0a7da4cf0891b5547fbb711

    • SHA256

      c2804117e22c3365d7f8cfb64278d6aaebc10bd84c13b1ed6ac5a8cf1d35b46e

    • SHA512

      e547c993bc91f3d8c33e78faa947687195b7d7d61c3400401ed653ed01d40db57887192d4e9cd53a6c60f274f87c69f336a39d9da224f5a80601e50fd9475e29

    • SSDEEP

      12288:ZwCBtLC+EptUpQ9SeSChq3YvxFBSSRMT8PTp4ihozED888888888888W8888888J:NNzCtUpQ9WWPBSSRMTEpXNX

    Score
    10/10
    renamerdiscoveryworm

    • Detects Renamer worm.

      Renamer aka Grename is worm written in Delphi.

    • Renamer family

      renamer

    • Renamer, Grenam

      Renamer aka Grenam is a worm written in Delphi.

      wormrenamer

    • Drops startup file

    • Loads dropped DLL

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks