Overview

overview

10

Static

static

10

70c01089ab...c7.exe

windows7-x64

10

70c01089ab...c7.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    70c01089abeaa55d7db84766677466209d651e92e740a31bef65284e60c894c7

  • Size

    824KB

  • Sample

    250119-c8h17aspa1

  • MD5

    5d68cb75614ded0ab4410d038630c833

  • SHA1

    5b3e1fd539e15527f924430cb28b41f70859c90a

  • SHA256

    70c01089abeaa55d7db84766677466209d651e92e740a31bef65284e60c894c7

  • SHA512

    a847da9e49ae58642c612b8b78016de0da809dbfa7e0c2469b61bc5f3ca8628d377020f7cd26f6f552608c28bb219a947ea4df9acbaac284a4d761c5ef950a42

  • SSDEEP

    12288:4wCBtLC+EptUpQ9SeSChq3YvxFBSSRMT8PTp4ihozEm888888888888W8888888J:YNzCtUpQ9WWPBSSRMTEpXNU

Score
10/10
renamerdiscoveryworm

Malware Config

Targets

    • Target

      70c01089abeaa55d7db84766677466209d651e92e740a31bef65284e60c894c7

    • Size

      824KB

    • MD5

      5d68cb75614ded0ab4410d038630c833

    • SHA1

      5b3e1fd539e15527f924430cb28b41f70859c90a

    • SHA256

      70c01089abeaa55d7db84766677466209d651e92e740a31bef65284e60c894c7

    • SHA512

      a847da9e49ae58642c612b8b78016de0da809dbfa7e0c2469b61bc5f3ca8628d377020f7cd26f6f552608c28bb219a947ea4df9acbaac284a4d761c5ef950a42

    • SSDEEP

      12288:4wCBtLC+EptUpQ9SeSChq3YvxFBSSRMT8PTp4ihozEm888888888888W8888888J:YNzCtUpQ9WWPBSSRMTEpXNU

    Score
    10/10
    renamerdiscoveryworm

    • Detects Renamer worm.

      Renamer aka Grename is worm written in Delphi.

    • Renamer family

      renamer

    • Renamer, Grenam

      Renamer aka Grenam is a worm written in Delphi.

      wormrenamer

    • Drops startup file

    • Loads dropped DLL

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks