Overview

overview

10

Static

static

10

bcc3d969ef...94.exe

windows7-x64

10

bcc3d969ef...94.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bcc3d969ef5734701e2aa1fd5400a2f38ef5c7d83d83ba9647bec5ec914ee794.exe

  • Size

    824KB

  • Sample

    250217-c6dnpaxlfw

  • MD5

    6da3ca50c7683889245d64a56b8feebc

  • SHA1

    5bfcf38ad81afeb3b28a986a725426112f4c1eb9

  • SHA256

    bcc3d969ef5734701e2aa1fd5400a2f38ef5c7d83d83ba9647bec5ec914ee794

  • SHA512

    311ef1cfdfc2ca61b9cfffe803b0ac0849cb410c4e4d07b41233969a289bc0514a9ee4766d0d1a2a179f43fe3077e541224e20186503a9d5c2181bcbe362ab4f

  • SSDEEP

    12288:pwCBtLC+EptUpQ9SeSChq3YvxFBSSRMT8PTp4ihozEc888888888888W8888888Z:dNzCtUpQ9WWPBSSRMTEpXNO

Score
10/10
renamerdiscoveryworm

Malware Config

Targets

    • Target

      bcc3d969ef5734701e2aa1fd5400a2f38ef5c7d83d83ba9647bec5ec914ee794.exe

    • Size

      824KB

    • MD5

      6da3ca50c7683889245d64a56b8feebc

    • SHA1

      5bfcf38ad81afeb3b28a986a725426112f4c1eb9

    • SHA256

      bcc3d969ef5734701e2aa1fd5400a2f38ef5c7d83d83ba9647bec5ec914ee794

    • SHA512

      311ef1cfdfc2ca61b9cfffe803b0ac0849cb410c4e4d07b41233969a289bc0514a9ee4766d0d1a2a179f43fe3077e541224e20186503a9d5c2181bcbe362ab4f

    • SSDEEP

      12288:pwCBtLC+EptUpQ9SeSChq3YvxFBSSRMT8PTp4ihozEc888888888888W8888888Z:dNzCtUpQ9WWPBSSRMTEpXNO

    Score
    10/10
    renamerdiscoveryworm

    • Detects Renamer worm.

      Renamer aka Grename is worm written in Delphi.

    • Renamer family

      renamer

    • Renamer, Grenam

      Renamer aka Grenam is a worm written in Delphi.

      wormrenamer

    • Downloads MZ/PE file

    • Drops startup file

    • Loads dropped DLL

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks