Overview

overview

10

Static

static

10

7ab34bfde9...e8.exe

windows7-x64

10

7ab34bfde9...e8.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7ab34bfde947e767ec6db801fe348147360c13855dd66bf44e66b9ca07aa97e8.exe

  • Size

    827KB

  • Sample

    250225-lq5xnssry8

  • MD5

    0d8e872dc921a9535bf9fdb6121c50d2

  • SHA1

    42b5c37220f279bd8360af79e670ae3e05451cdf

  • SHA256

    7ab34bfde947e767ec6db801fe348147360c13855dd66bf44e66b9ca07aa97e8

  • SHA512

    2e9fadcc1637c9327ad9939cd33440a0f462d75aa3af67b0c3dacc980a812452b6d35aaa45db7790dc5695ed875310348ae155ecbd27e1e477c86419dd6775a4

  • SSDEEP

    12288:xwCBtLC+EptUpQ9SeSChq3YvxFBSSRMT8PTp4ihozEm888888888888W8888888x:1NzCtUpQ9WWPBSSRMTEpXNM

Score
10/10
renamerdiscoveryworm

Malware Config

Targets

    • Target

      7ab34bfde947e767ec6db801fe348147360c13855dd66bf44e66b9ca07aa97e8.exe

    • Size

      827KB

    • MD5

      0d8e872dc921a9535bf9fdb6121c50d2

    • SHA1

      42b5c37220f279bd8360af79e670ae3e05451cdf

    • SHA256

      7ab34bfde947e767ec6db801fe348147360c13855dd66bf44e66b9ca07aa97e8

    • SHA512

      2e9fadcc1637c9327ad9939cd33440a0f462d75aa3af67b0c3dacc980a812452b6d35aaa45db7790dc5695ed875310348ae155ecbd27e1e477c86419dd6775a4

    • SSDEEP

      12288:xwCBtLC+EptUpQ9SeSChq3YvxFBSSRMT8PTp4ihozEm888888888888W8888888x:1NzCtUpQ9WWPBSSRMTEpXNM

    Score
    10/10
    renamerdiscoveryworm

    • Detects Renamer worm.

      Renamer aka Grename is worm written in Delphi.

    • Renamer family

      renamer

    • Renamer, Grenam

      Renamer aka Grenam is a worm written in Delphi.

      wormrenamer

    • Drops startup file

    • Loads dropped DLL

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks