General
- Target 8fee5a277797a25cc4f3635f6820762a7c5944d5e107731cc9c7dc7872c877df
- Size 824KB
- Sample241106-bcmttssbqa
- SHA256 8fee5a277797a25cc4f3635f6820762a7c5944d5e107731cc9c7dc7872c877df
- MD5 fa2185ba1d7503b471d089eed573c560
- SHA1 f63296d12629d20e190942159d97c4fb30b27f32
- SHA512 80fde5d8d120fce27012884993f8f3507ff3af538a1840b438af24cc9e11be80edf1ec50c4c71becaf3b114b1f027f3437e141f9d666cacdee11e4af166475de
- SSDEEP 12288:nwCBtLC+EptUpQ9SeSChq3YvxFBSSRMT8PTp4ihozEw888888888888W8888888J:TNzCtUpQ9WWPBSSRMTEpXNq
- MD5 SHA1 SHA512 SSDEEP
Behavioral task
behavioral1
Sample
8fee5a277797a25cc4f3635f6820762a7c5944d5e107731cc9c7dc7872c877df.exe
Resource
win7-20240903-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 8fee5a277797a25cc4f3635f6820762a7c5944d5e107731cc9c7dc7872c877df
- Size 824KB
- SHA256 8fee5a277797a25cc4f3635f6820762a7c5944d5e107731cc9c7dc7872c877df
- MD5 fa2185ba1d7503b471d089eed573c560
- SHA1 f63296d12629d20e190942159d97c4fb30b27f32
- SHA512 80fde5d8d120fce27012884993f8f3507ff3af538a1840b438af24cc9e11be80edf1ec50c4c71becaf3b114b1f027f3437e141f9d666cacdee11e4af166475de
- SSDEEP 12288:nwCBtLC+EptUpQ9SeSChq3YvxFBSSRMT8PTp4ihozEw888888888888W8888888J:TNzCtUpQ9WWPBSSRMTEpXNq
- MD5 SHA1 SHA512 SSDEEP
-
Detects Renamer worm.
Renamer aka Grename is worm written in Delphi.
-
Renamer family
-
Drops startup file
-
Loads dropped DLL
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.