Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

9ecb94d325...c3.exe

windows7-x64

10

9ecb94d325...c3.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9ecb94d325ed282977372803e2e7f86d15d2e5558a98e8da9b951453c33ea1c3.exe

  • Size

    824KB

  • Sample

    250101-svy39asqfk

  • MD5

    23e3f8ab1dd0d444f0a332c0b27e47b1

  • SHA1

    194473c912d907ea589b358efba53a5cd1da9e66

  • SHA256

    9ecb94d325ed282977372803e2e7f86d15d2e5558a98e8da9b951453c33ea1c3

  • SHA512

    d27aaa1d56a828681a312c45912240baff4a269d3c375984edb96d4a925acfa59c652743dc64d122975d30de69f3e32df217efd23290995369ce2845fc869d41

  • SSDEEP

    12288:nwCBtLC+EptUpQ9SeSChq3YvxFBSSRMT8PTp4ihozEE888888888888W8888888j:TNzCtUpQ9WWPBSSRMTEpXNi

Score
10/10
renamerdiscoveryworm

Malware Config

Targets

    • Target

      9ecb94d325ed282977372803e2e7f86d15d2e5558a98e8da9b951453c33ea1c3.exe

    • Size

      824KB

    • MD5

      23e3f8ab1dd0d444f0a332c0b27e47b1

    • SHA1

      194473c912d907ea589b358efba53a5cd1da9e66

    • SHA256

      9ecb94d325ed282977372803e2e7f86d15d2e5558a98e8da9b951453c33ea1c3

    • SHA512

      d27aaa1d56a828681a312c45912240baff4a269d3c375984edb96d4a925acfa59c652743dc64d122975d30de69f3e32df217efd23290995369ce2845fc869d41

    • SSDEEP

      12288:nwCBtLC+EptUpQ9SeSChq3YvxFBSSRMT8PTp4ihozEE888888888888W8888888j:TNzCtUpQ9WWPBSSRMTEpXNi

    Score
    10/10
    renamerdiscoveryworm

    • Detects Renamer worm.

      Renamer aka Grename is worm written in Delphi.

    • Renamer family

      renamer

    • Renamer, Grenam

      Renamer aka Grenam is a worm written in Delphi.

      wormrenamer

    • Drops startup file

    • Loads dropped DLL

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks