Overview

overview

10

Static

static

10

309dd774d2...f1.exe

windows7-x64

10

309dd774d2...f1.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    309dd774d284192e6deccfe058b247265e5ab2e33bc0e2378f46dd7d60430ef1

  • Size

    827KB

  • Sample

    250216-1mbxrazkdr

  • MD5

    5f9ac474a0366f9712931999ece688f6

  • SHA1

    addca9529dd7f37e073beff3712debc805f9292a

  • SHA256

    309dd774d284192e6deccfe058b247265e5ab2e33bc0e2378f46dd7d60430ef1

  • SHA512

    3ff34550d15018c162bceb61f704adf16c4e6dc20ad4f791156e1b39bb7ea1ca8b132bdbb70dee92a87b1422f522d52485e4bf7a2ec9353f351cde71183870d8

  • SSDEEP

    12288:PwCBtLC+EptUpQ9SeSChq3YvxFBSSRMT8PTp4ihozE4888888888888W8888888B:rNzCtUpQ9WWPBSSRMTEpXNq

Score
10/10
renamerdiscoveryworm

Malware Config

Targets

    • Target

      309dd774d284192e6deccfe058b247265e5ab2e33bc0e2378f46dd7d60430ef1

    • Size

      827KB

    • MD5

      5f9ac474a0366f9712931999ece688f6

    • SHA1

      addca9529dd7f37e073beff3712debc805f9292a

    • SHA256

      309dd774d284192e6deccfe058b247265e5ab2e33bc0e2378f46dd7d60430ef1

    • SHA512

      3ff34550d15018c162bceb61f704adf16c4e6dc20ad4f791156e1b39bb7ea1ca8b132bdbb70dee92a87b1422f522d52485e4bf7a2ec9353f351cde71183870d8

    • SSDEEP

      12288:PwCBtLC+EptUpQ9SeSChq3YvxFBSSRMT8PTp4ihozE4888888888888W8888888B:rNzCtUpQ9WWPBSSRMTEpXNq

    Score
    10/10
    renamerdiscoveryworm

    • Detects Renamer worm.

      Renamer aka Grename is worm written in Delphi.

    • Renamer family

      renamer

    • Renamer, Grenam

      Renamer aka Grenam is a worm written in Delphi.

      wormrenamer

    • Downloads MZ/PE file

    • Drops startup file

    • Loads dropped DLL

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks