APT / THREAT GROUP
Grenam
4
aliases
Last seen:Mar 17, 2026
Intelligence Profile
A malware that modifies every JPG file found on a computer by adding a string in its bottom corner spelling out 'I am Sorry'.
Grenam is a companion virus, which is a form of file infection. It infects by prepending the letter 'g' in front of host files and placing itself with the original name of the host.
Threat Analysis
Grenam is a known-sophistication threat actor of undetermined national origin, engaged in cyber operations with a primary motivation of unknown activity patterns.
External References
Quick Facts
TypeAPT / Threat Group
Aliases4
Also Known As
GrenamRenamerwin.grenamgnamer
External Intelligence
Malpedia: win.grenamResearch Links
Data sourced from Malpedia, Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Actor attribution is based on available intelligence and may be incomplete.