Overview

overview

10

Static

static

10

6b716c229b...6b.exe

windows7-x64

10

6b716c229b...6b.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6b716c229b6be44a69ee9269b66268f29ccf0835654da4ff8a5534b1369d5d6b.exe

  • Size

    824KB

  • Sample

    250116-yvzyfawqfv

  • MD5

    0f36ce779453fd9db82887ec9b81ae44

  • SHA1

    584653395c3a4d4ec2d6496ac9de7ae19bf70519

  • SHA256

    6b716c229b6be44a69ee9269b66268f29ccf0835654da4ff8a5534b1369d5d6b

  • SHA512

    27362603b9f5e664dc46444682f1e0246cb1c2b45372566917706758e852a748d3677872937e53f51b29b61d1aeda24d60862166817426fd7c0f7b8d29eb6e38

  • SSDEEP

    12288:+wCBtLC+EptUpQ9SeSChq3YvxFBSSRMT8PTp4ihozEA888888888888W8888888D:ONzCtUpQ9WWPBSSRMTEpXNu

Score
10/10
renamerdiscoveryworm

Malware Config

Targets

    • Target

      6b716c229b6be44a69ee9269b66268f29ccf0835654da4ff8a5534b1369d5d6b.exe

    • Size

      824KB

    • MD5

      0f36ce779453fd9db82887ec9b81ae44

    • SHA1

      584653395c3a4d4ec2d6496ac9de7ae19bf70519

    • SHA256

      6b716c229b6be44a69ee9269b66268f29ccf0835654da4ff8a5534b1369d5d6b

    • SHA512

      27362603b9f5e664dc46444682f1e0246cb1c2b45372566917706758e852a748d3677872937e53f51b29b61d1aeda24d60862166817426fd7c0f7b8d29eb6e38

    • SSDEEP

      12288:+wCBtLC+EptUpQ9SeSChq3YvxFBSSRMT8PTp4ihozEA888888888888W8888888D:ONzCtUpQ9WWPBSSRMTEpXNu

    Score
    10/10
    renamerdiscoveryworm

    • Detects Renamer worm.

      Renamer aka Grename is worm written in Delphi.

    • Renamer family

      renamer

    • Renamer, Grenam

      Renamer aka Grenam is a worm written in Delphi.

      wormrenamer

    • Drops startup file

    • Loads dropped DLL

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks