Overview

overview

10

Static

static

10

badde8efb1...26.exe

windows7-x64

10

badde8efb1...26.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    badde8efb1e6701180c01d0e72716c17d51158577f8a592a5e0396e777458426.exe

  • Size

    824KB

  • Sample

    241124-flcgnsvnev

  • MD5

    6c6edb9ebb069020bb7087df60dcb4e3

  • SHA1

    e7bc3e43de1d51da7bcf2c91936dc90153a406c6

  • SHA256

    badde8efb1e6701180c01d0e72716c17d51158577f8a592a5e0396e777458426

  • SHA512

    d477ee7471d6ffa5152c58ddb48ba9cd324bf343de513fb30281c8ff93bc9751f44e1626fd67a760c1e313a26cbbc76d0a99c0ac1d1c9e4c5d131c6c6421fbe3

  • SSDEEP

    12288:9wCBtLC+EptUpQ9SeSChq3YvxFBSSRMT8PTp4ihozEc888888888888W88888885:xNzCtUpQ9WWPBSSRMTEpXNO

Score
10/10
renamerdiscoveryworm

Malware Config

Targets

    • Target

      badde8efb1e6701180c01d0e72716c17d51158577f8a592a5e0396e777458426.exe

    • Size

      824KB

    • MD5

      6c6edb9ebb069020bb7087df60dcb4e3

    • SHA1

      e7bc3e43de1d51da7bcf2c91936dc90153a406c6

    • SHA256

      badde8efb1e6701180c01d0e72716c17d51158577f8a592a5e0396e777458426

    • SHA512

      d477ee7471d6ffa5152c58ddb48ba9cd324bf343de513fb30281c8ff93bc9751f44e1626fd67a760c1e313a26cbbc76d0a99c0ac1d1c9e4c5d131c6c6421fbe3

    • SSDEEP

      12288:9wCBtLC+EptUpQ9SeSChq3YvxFBSSRMT8PTp4ihozEc888888888888W88888885:xNzCtUpQ9WWPBSSRMTEpXNO

    Score
    10/10
    renamerdiscoveryworm

    • Detects Renamer worm.

      Renamer aka Grename is worm written in Delphi.

    • Renamer family

      renamer

    • Renamer, Grenam

      Renamer aka Grenam is a worm written in Delphi.

      wormrenamer

    • Drops startup file

    • Loads dropped DLL

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks