Overview

overview

10

Static

static

10

8f7bee04c5...38.exe

windows7-x64

10

8f7bee04c5...38.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8f7bee04c5e8684ba34e8793ef689a9832d0ef4dd431c34a92002b4901819138.exe

  • Size

    824KB

  • Sample

    241217-aq38asvqhl

  • MD5

    9892ee8e399ff4ad67c7ebfd53f89ad8

  • SHA1

    8c5ddd27e1eb58c6c8a057a9123c6cbbc07a0d2e

  • SHA256

    8f7bee04c5e8684ba34e8793ef689a9832d0ef4dd431c34a92002b4901819138

  • SHA512

    ff675879d5b29e63162a67f3c65581786e138c9dc58678f92c5d4174ff11aabb7fdd07a53a3c7d7a2d97ca9d703c55cb06e6520b9196c8a2784433c4324376fd

  • SSDEEP

    12288:1wCBtLC+EptUpQ9SeSChq3YvxFBSSRMT8PTp4ihozEc888888888888W8888888r:ZNzCtUpQ9WWPBSSRMTEpXNa

Score
10/10
renamerdiscoveryworm

Malware Config

Targets

    • Target

      8f7bee04c5e8684ba34e8793ef689a9832d0ef4dd431c34a92002b4901819138.exe

    • Size

      824KB

    • MD5

      9892ee8e399ff4ad67c7ebfd53f89ad8

    • SHA1

      8c5ddd27e1eb58c6c8a057a9123c6cbbc07a0d2e

    • SHA256

      8f7bee04c5e8684ba34e8793ef689a9832d0ef4dd431c34a92002b4901819138

    • SHA512

      ff675879d5b29e63162a67f3c65581786e138c9dc58678f92c5d4174ff11aabb7fdd07a53a3c7d7a2d97ca9d703c55cb06e6520b9196c8a2784433c4324376fd

    • SSDEEP

      12288:1wCBtLC+EptUpQ9SeSChq3YvxFBSSRMT8PTp4ihozEc888888888888W8888888r:ZNzCtUpQ9WWPBSSRMTEpXNa

    Score
    10/10
    renamerdiscoveryworm

    • Detects Renamer worm.

      Renamer aka Grename is worm written in Delphi.

    • Renamer family

      renamer

    • Renamer, Grenam

      Renamer aka Grenam is a worm written in Delphi.

      wormrenamer

    • Drops startup file

    • Loads dropped DLL

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks