Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    c4a19a3c9301fbc4c23bd9a96b3e65f6d1dae70c7190898e104b1aab90281ff2N.exe

  • Size

    824KB

  • Sample

    250101-zjnayawjcr

  • MD5

    f17d6b41c4a8cb1e1abb2ed548da9a80

  • SHA1

    49b660f7d9299a962c2250c178deafd529d3852c

  • SHA256

    c4a19a3c9301fbc4c23bd9a96b3e65f6d1dae70c7190898e104b1aab90281ff2

  • SHA512

    1c353a0ecc560ee49338c7ec4995e4b38ce62537983b2be613ed010c5df0947cb2c38074e810d93bc7e5a491b33eac6f80f8100109bec5e0b14cbb84f30cd444

  • SSDEEP

    12288:9wCBtLC+EptUpQ9SeSChq3YvxFBSSRMT8PTp4ihozE3888888888888W8888888J:xNzCtUpQ9WWPBSSRMTEpXNj

Score
10/10

Malware Config

Targets

    • Target

      c4a19a3c9301fbc4c23bd9a96b3e65f6d1dae70c7190898e104b1aab90281ff2N.exe

    • Size

      824KB

    • MD5

      f17d6b41c4a8cb1e1abb2ed548da9a80

    • SHA1

      49b660f7d9299a962c2250c178deafd529d3852c

    • SHA256

      c4a19a3c9301fbc4c23bd9a96b3e65f6d1dae70c7190898e104b1aab90281ff2

    • SHA512

      1c353a0ecc560ee49338c7ec4995e4b38ce62537983b2be613ed010c5df0947cb2c38074e810d93bc7e5a491b33eac6f80f8100109bec5e0b14cbb84f30cd444

    • SSDEEP

      12288:9wCBtLC+EptUpQ9SeSChq3YvxFBSSRMT8PTp4ihozE3888888888888W8888888J:xNzCtUpQ9WWPBSSRMTEpXNj

    Score
    10/10
    • Detects Renamer worm.

      Renamer aka Grename is worm written in Delphi.

    • Renamer family

    • Renamer, Grenam

      Renamer aka Grenam is a worm written in Delphi.

    • Drops startup file

    • Loads dropped DLL

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

MITRE ATT&CK Enterprise v15

Tasks