Overview

overview

10

Static

static

10

beddff3021...86.exe

windows7-x64

10

beddff3021...86.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    beddff3021a12598338e78b51be30f23c37f88f23560fe5d1da79c83b407df86.exe

  • Size

    824KB

  • Sample

    250227-eradtsvsbt

  • MD5

    b323e112d8cefae3bb047d184613eec4

  • SHA1

    7f7bcaa88a40482e67337af22ff1b134bf2116ba

  • SHA256

    beddff3021a12598338e78b51be30f23c37f88f23560fe5d1da79c83b407df86

  • SHA512

    e404bfdf16532f8579ca3db6960f3dd0e12e5287f5d40f4f3d5b1f731a2c9e3061317520f6f5f2b8e3f43e0651159812c3b55210f6f1dff449996d623cb10af1

  • SSDEEP

    12288:OwCBtLC+EptUpQ9SeSChq3YvxFBSSRMT8PTp4FhozEM888888888888W8888888J:eNzCtUpQ9WWPBSSRMTEpMNe

Score
10/10
renamerdiscoveryworm

Malware Config

Targets

    • Target

      beddff3021a12598338e78b51be30f23c37f88f23560fe5d1da79c83b407df86.exe

    • Size

      824KB

    • MD5

      b323e112d8cefae3bb047d184613eec4

    • SHA1

      7f7bcaa88a40482e67337af22ff1b134bf2116ba

    • SHA256

      beddff3021a12598338e78b51be30f23c37f88f23560fe5d1da79c83b407df86

    • SHA512

      e404bfdf16532f8579ca3db6960f3dd0e12e5287f5d40f4f3d5b1f731a2c9e3061317520f6f5f2b8e3f43e0651159812c3b55210f6f1dff449996d623cb10af1

    • SSDEEP

      12288:OwCBtLC+EptUpQ9SeSChq3YvxFBSSRMT8PTp4FhozEM888888888888W8888888J:eNzCtUpQ9WWPBSSRMTEpMNe

    Score
    10/10
    renamerdiscoveryworm

    • Detects Renamer worm.

      Renamer aka Grename is worm written in Delphi.

    • Renamer family

      renamer

    • Renamer, Grenam

      Renamer aka Grenam is a worm written in Delphi.

      wormrenamer

    • Drops startup file

    • Loads dropped DLL

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks