Overview

overview

10

Static

static

10

7c22b81213...0N.exe

windows7-x64

10

7c22b81213...0N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7c22b81213236b60afcfdc47c938a72b3b2c72040c746eaf8028bb64fa0d7200N.exe

  • Size

    827KB

  • Sample

    241219-hwmfqsvkgn

  • MD5

    1154d24117bb8c904a87c6d7353f6080

  • SHA1

    5e27d53830b164cefd1d00b87301c74bfc5cee73

  • SHA256

    7c22b81213236b60afcfdc47c938a72b3b2c72040c746eaf8028bb64fa0d7200

  • SHA512

    c9ebed829be0d0cc5ff96ffa6921e58175c03e053bb99688a747a9f2649a6a8bb0b6f537a9bfeb400292f91ddf1f45b09aae4a580a8a567ef7b68704f8919254

  • SSDEEP

    12288:YwCBtLC+EptUpQ9SeSChq3YvxFBSSRMT8PTp4ihozEO888888888888W8888888B:4NzCtUpQ9WWPBSSRMTEpXN0

Score
10/10
renamerdiscoveryworm

Malware Config

Targets

    • Target

      7c22b81213236b60afcfdc47c938a72b3b2c72040c746eaf8028bb64fa0d7200N.exe

    • Size

      827KB

    • MD5

      1154d24117bb8c904a87c6d7353f6080

    • SHA1

      5e27d53830b164cefd1d00b87301c74bfc5cee73

    • SHA256

      7c22b81213236b60afcfdc47c938a72b3b2c72040c746eaf8028bb64fa0d7200

    • SHA512

      c9ebed829be0d0cc5ff96ffa6921e58175c03e053bb99688a747a9f2649a6a8bb0b6f537a9bfeb400292f91ddf1f45b09aae4a580a8a567ef7b68704f8919254

    • SSDEEP

      12288:YwCBtLC+EptUpQ9SeSChq3YvxFBSSRMT8PTp4ihozEO888888888888W8888888B:4NzCtUpQ9WWPBSSRMTEpXN0

    Score
    10/10
    renamerdiscoveryworm

    • Detects Renamer worm.

      Renamer aka Grename is worm written in Delphi.

    • Renamer family

      renamer

    • Renamer, Grenam

      Renamer aka Grenam is a worm written in Delphi.

      wormrenamer

    • Drops startup file

    • Loads dropped DLL

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks