Overview

overview

10

Static

static

10

8555c7bba5...1N.exe

windows7-x64

10

8555c7bba5...1N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8555c7bba5a49e34f0f0f96aeb46e5db69447cf46ef492327774d66c94636f51N

  • Size

    824KB

  • Sample

    241110-g725ws1hne

  • MD5

    8af7faa96d8d78dbfb5d66fef62083d0

  • SHA1

    fff3edfaf2179ffbbe24ed9245fa311ab48bb3c6

  • SHA256

    8555c7bba5a49e34f0f0f96aeb46e5db69447cf46ef492327774d66c94636f51

  • SHA512

    5a902234511b9dd2024d6e035c5f832f408762d4e4fefda44ff101a2a393814ab5ba2a85f7c74305096bb826ff56c380a5470d658afac9591c18bcc6a15e8c76

  • SSDEEP

    12288:ZwCBtLC+EptUpQ9SeSChq3YvxFBSSRMT8PTp4ihozE0888888888888W8888888J:NNzCtUpQ9WWPBSSRMTEpXNG

Score
10/10
renamerdiscoveryworm

Malware Config

Targets

    • Target

      8555c7bba5a49e34f0f0f96aeb46e5db69447cf46ef492327774d66c94636f51N

    • Size

      824KB

    • MD5

      8af7faa96d8d78dbfb5d66fef62083d0

    • SHA1

      fff3edfaf2179ffbbe24ed9245fa311ab48bb3c6

    • SHA256

      8555c7bba5a49e34f0f0f96aeb46e5db69447cf46ef492327774d66c94636f51

    • SHA512

      5a902234511b9dd2024d6e035c5f832f408762d4e4fefda44ff101a2a393814ab5ba2a85f7c74305096bb826ff56c380a5470d658afac9591c18bcc6a15e8c76

    • SSDEEP

      12288:ZwCBtLC+EptUpQ9SeSChq3YvxFBSSRMT8PTp4ihozE0888888888888W8888888J:NNzCtUpQ9WWPBSSRMTEpXNG

    Score
    10/10
    renamerdiscoveryworm

    • Detects Renamer worm.

      Renamer aka Grename is worm written in Delphi.

    • Renamer family

      renamer

    • Renamer, Grenam

      Renamer aka Grenam is a worm written in Delphi.

      wormrenamer

    • Drops startup file

    • Loads dropped DLL

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks