Overview

overview

10

Static

static

10

05868c7c70...2N.exe

windows7-x64

10

05868c7c70...2N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    05868c7c70eb9741feece2ffe9e3e6929817ff9881e6e35c7bfbab3e55a93532N.exe

  • Size

    827KB

  • Sample

    241216-n2vbeszqhk

  • MD5

    3cf87859510fbe634050ee5ae9579210

  • SHA1

    1a46cd844ea9469b4c66cf2de405537ef677c492

  • SHA256

    05868c7c70eb9741feece2ffe9e3e6929817ff9881e6e35c7bfbab3e55a93532

  • SHA512

    21cf943fad634102cf57f40f62a7ed518742e80a4d763544496e2bbedfbefee31256ea037989b14b982b236587a4c9c835bb09622e015bf349d62db4cc18a9ad

  • SSDEEP

    12288:dwCBtLC+EptUpQ9SeSChq3YvxFBSSRMT8PTp4ihozEc888888888888W8888888B:RNzCtUpQ9WWPBSSRMTEpXNm

Score
10/10
renamerdiscoveryworm

Malware Config

Targets

    • Target

      05868c7c70eb9741feece2ffe9e3e6929817ff9881e6e35c7bfbab3e55a93532N.exe

    • Size

      827KB

    • MD5

      3cf87859510fbe634050ee5ae9579210

    • SHA1

      1a46cd844ea9469b4c66cf2de405537ef677c492

    • SHA256

      05868c7c70eb9741feece2ffe9e3e6929817ff9881e6e35c7bfbab3e55a93532

    • SHA512

      21cf943fad634102cf57f40f62a7ed518742e80a4d763544496e2bbedfbefee31256ea037989b14b982b236587a4c9c835bb09622e015bf349d62db4cc18a9ad

    • SSDEEP

      12288:dwCBtLC+EptUpQ9SeSChq3YvxFBSSRMT8PTp4ihozEc888888888888W8888888B:RNzCtUpQ9WWPBSSRMTEpXNm

    Score
    10/10
    renamerdiscoveryworm

    • Detects Renamer worm.

      Renamer aka Grename is worm written in Delphi.

    • Renamer family

      renamer

    • Renamer, Grenam

      Renamer aka Grenam is a worm written in Delphi.

      wormrenamer

    • Drops startup file

    • Loads dropped DLL

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks