Overview

overview

10

Static

static

10

2ac0f659f3...2d.exe

windows7-x64

10

2ac0f659f3...2d.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2ac0f659f37e2c4ffddc4fa0b45b3415a1456defbd706b7e30f0512e8680252d.exe

  • Size

    824KB

  • Sample

    250216-xazaqsvngq

  • MD5

    d92a0204965b1fd7b1d6b5487f70f355

  • SHA1

    66fa40bf335736f35153af7017d5b0fa50f5de4e

  • SHA256

    2ac0f659f37e2c4ffddc4fa0b45b3415a1456defbd706b7e30f0512e8680252d

  • SHA512

    2ed73d7a9f83d7782ac574eea6e1a3591ce985a5fe3643e7aae3fc8033a016bc7b731835f61b264d4e5bf3a8621932e1b5f3d515205e1b62228be0983929c710

  • SSDEEP

    12288:pwCBtLC+EptUpQ9SeSChq3YvxFBSSRMT8PTp4ihozEf888888888888W8888888T:dNzCtUpQ9WWPBSSRMTEpXNp

Score
10/10
renamerdiscoveryworm

Malware Config

Targets

    • Target

      2ac0f659f37e2c4ffddc4fa0b45b3415a1456defbd706b7e30f0512e8680252d.exe

    • Size

      824KB

    • MD5

      d92a0204965b1fd7b1d6b5487f70f355

    • SHA1

      66fa40bf335736f35153af7017d5b0fa50f5de4e

    • SHA256

      2ac0f659f37e2c4ffddc4fa0b45b3415a1456defbd706b7e30f0512e8680252d

    • SHA512

      2ed73d7a9f83d7782ac574eea6e1a3591ce985a5fe3643e7aae3fc8033a016bc7b731835f61b264d4e5bf3a8621932e1b5f3d515205e1b62228be0983929c710

    • SSDEEP

      12288:pwCBtLC+EptUpQ9SeSChq3YvxFBSSRMT8PTp4ihozEf888888888888W8888888T:dNzCtUpQ9WWPBSSRMTEpXNp

    Score
    10/10
    renamerdiscoveryworm

    • Detects Renamer worm.

      Renamer aka Grename is worm written in Delphi.

    • Renamer family

      renamer

    • Renamer, Grenam

      Renamer aka Grenam is a worm written in Delphi.

      wormrenamer

    • Downloads MZ/PE file

    • Drops startup file

    • Loads dropped DLL

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks