Overview

overview

10

Static

static

10

bf8a8f298d...bN.exe

windows7-x64

10

bf8a8f298d...bN.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bf8a8f298d83f87dd258a479bbb7bd742d20f32504c392c00d6c8255e005b7abN.exe

  • Size

    824KB

  • Sample

    241217-n62w3azkgq

  • MD5

    50d5a074897519ee758995bc4fdaeed0

  • SHA1

    aab1c2b3cb16a244f037bc6eb2131c6997d721da

  • SHA256

    bf8a8f298d83f87dd258a479bbb7bd742d20f32504c392c00d6c8255e005b7ab

  • SHA512

    f754ad580826449c58f357c1592c2a5e9d98e322daa1436aee6d9847191ea585dbbf484c59ace417c08b5651aa36cd92afcc49194f9b29f73a849c9a5adc05dd

  • SSDEEP

    12288:1wCBtLC+EptUpQ9SeSChq3YvxFBSSRMT8PTp4ihozEc888888888888W8888888J:ZNzCtUpQ9WWPBSSRMTEpXNu

Score
10/10
renamerdiscoveryworm

Malware Config

Targets

    • Target

      bf8a8f298d83f87dd258a479bbb7bd742d20f32504c392c00d6c8255e005b7abN.exe

    • Size

      824KB

    • MD5

      50d5a074897519ee758995bc4fdaeed0

    • SHA1

      aab1c2b3cb16a244f037bc6eb2131c6997d721da

    • SHA256

      bf8a8f298d83f87dd258a479bbb7bd742d20f32504c392c00d6c8255e005b7ab

    • SHA512

      f754ad580826449c58f357c1592c2a5e9d98e322daa1436aee6d9847191ea585dbbf484c59ace417c08b5651aa36cd92afcc49194f9b29f73a849c9a5adc05dd

    • SSDEEP

      12288:1wCBtLC+EptUpQ9SeSChq3YvxFBSSRMT8PTp4ihozEc888888888888W8888888J:ZNzCtUpQ9WWPBSSRMTEpXNu

    Score
    10/10
    renamerdiscoveryworm

    • Detects Renamer worm.

      Renamer aka Grename is worm written in Delphi.

    • Renamer family

      renamer

    • Renamer, Grenam

      Renamer aka Grenam is a worm written in Delphi.

      wormrenamer

    • Drops startup file

    • Loads dropped DLL

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks