Overview

overview

10

Static

static

10

dfec431141...12.exe

windows7-x64

10

dfec431141...12.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dfec43114106488c190d45d0b71d45a293ad2f420d6eec605a670ce7d8b00b12

  • Size

    824KB

  • Sample

    241125-ffjc2avqaj

  • MD5

    7af4b2772885e99c78479df3b9d53225

  • SHA1

    0f8252219e09fff025c786a85b834bc1978d43dd

  • SHA256

    dfec43114106488c190d45d0b71d45a293ad2f420d6eec605a670ce7d8b00b12

  • SHA512

    c11ce7b3dc534bc04a24a866b0483e935f3bbc8c6aff1dcacc40e0aa0d4c6d329d9335a8c34fdb72103a92aa3695dd7da567efedbae136f86421e4a4a36513ba

  • SSDEEP

    12288:3wCBtLC+EptUpQ9SeSChq3YvxFBSSRMT8PTp4ihozEr888888888888W8888888J:jNzCtUpQ9WWPBSSRMTEpXNf

Score
10/10
renamerdiscoveryworm

Malware Config

Targets

    • Target

      dfec43114106488c190d45d0b71d45a293ad2f420d6eec605a670ce7d8b00b12

    • Size

      824KB

    • MD5

      7af4b2772885e99c78479df3b9d53225

    • SHA1

      0f8252219e09fff025c786a85b834bc1978d43dd

    • SHA256

      dfec43114106488c190d45d0b71d45a293ad2f420d6eec605a670ce7d8b00b12

    • SHA512

      c11ce7b3dc534bc04a24a866b0483e935f3bbc8c6aff1dcacc40e0aa0d4c6d329d9335a8c34fdb72103a92aa3695dd7da567efedbae136f86421e4a4a36513ba

    • SSDEEP

      12288:3wCBtLC+EptUpQ9SeSChq3YvxFBSSRMT8PTp4ihozEr888888888888W8888888J:jNzCtUpQ9WWPBSSRMTEpXNf

    Score
    10/10
    renamerdiscoveryworm

    • Detects Renamer worm.

      Renamer aka Grename is worm written in Delphi.

    • Renamer family

      renamer

    • Renamer, Grenam

      Renamer aka Grenam is a worm written in Delphi.

      wormrenamer

    • Drops startup file

    • Loads dropped DLL

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks