Overview

overview

10

Static

static

10

0bf6baf927...dN.exe

windows7-x64

10

0bf6baf927...dN.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0bf6baf9279378e0ae81caa4f203bed6be574cacc0911bf2370faa1cafdc1b6dN.exe

  • Size

    824KB

  • Sample

    250101-q58pbsxjev

  • MD5

    d06a613fbdf53f4d6347b70a4e288a50

  • SHA1

    3f7c302817eb53e3061a62e9505eaa908814c79e

  • SHA256

    0bf6baf9279378e0ae81caa4f203bed6be574cacc0911bf2370faa1cafdc1b6d

  • SHA512

    f7dda6716233589e561d13d5b83c85b55a9b393b8d5eef2c6a5fe5952c274fce4d0e95b25255fa9e660e069ae1b509f3e5b7efa1c3594b10ff8d4f2c028615a1

  • SSDEEP

    12288:nwCBtLC+EptUpQ9SeSChq3YvxFBSSRMT8PTp4ihozE4888888888888W8888888J:TNzCtUpQ9WWPBSSRMTEpXNS

Score
10/10
renamerdiscoveryworm

Malware Config

Targets

    • Target

      0bf6baf9279378e0ae81caa4f203bed6be574cacc0911bf2370faa1cafdc1b6dN.exe

    • Size

      824KB

    • MD5

      d06a613fbdf53f4d6347b70a4e288a50

    • SHA1

      3f7c302817eb53e3061a62e9505eaa908814c79e

    • SHA256

      0bf6baf9279378e0ae81caa4f203bed6be574cacc0911bf2370faa1cafdc1b6d

    • SHA512

      f7dda6716233589e561d13d5b83c85b55a9b393b8d5eef2c6a5fe5952c274fce4d0e95b25255fa9e660e069ae1b509f3e5b7efa1c3594b10ff8d4f2c028615a1

    • SSDEEP

      12288:nwCBtLC+EptUpQ9SeSChq3YvxFBSSRMT8PTp4ihozE4888888888888W8888888J:TNzCtUpQ9WWPBSSRMTEpXNS

    Score
    10/10
    renamerdiscoveryworm

    • Detects Renamer worm.

      Renamer aka Grename is worm written in Delphi.

    • Renamer family

      renamer

    • Renamer, Grenam

      Renamer aka Grenam is a worm written in Delphi.

      wormrenamer

    • Drops startup file

    • Loads dropped DLL

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks