Overview

overview

10

Static

static

7

17b6f13f7f...98.exe

windows7-x64

10

17b6f13f7f...98.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    17b6f13f7f0d6ba2965c68c9e7e66dab30879d1b61d286d03a41b7a183b2be98

  • Size

    1.1MB

  • Sample

    240228-d4adxsab5s

  • MD5

    d76c44d8a9c03f21ad39d9a24649997a

  • SHA1

    a3da6c3e8b4c9dc0e2f37541232220285c2ea556

  • SHA256

    17b6f13f7f0d6ba2965c68c9e7e66dab30879d1b61d286d03a41b7a183b2be98

  • SHA512

    bc6cd374978ab93fc1c8d1aaedfe0a1db57f6c281ee8e866073bd4f7131cadb92b61f9ba6a9171bff217ae9722259cb9381c91f826edd3cce3f958f9fd9a2437

  • SSDEEP

    24576:NTRRgkObgBSIiAZQ18oVHA4zJcwPZTR51+Lcetl:NTznniAZFoVHA4d1Zt5A

Score
10/10
cerberransomwareupx

Malware Config

Targets

    • Target

      17b6f13f7f0d6ba2965c68c9e7e66dab30879d1b61d286d03a41b7a183b2be98

    • Size

      1.1MB

    • MD5

      d76c44d8a9c03f21ad39d9a24649997a

    • SHA1

      a3da6c3e8b4c9dc0e2f37541232220285c2ea556

    • SHA256

      17b6f13f7f0d6ba2965c68c9e7e66dab30879d1b61d286d03a41b7a183b2be98

    • SHA512

      bc6cd374978ab93fc1c8d1aaedfe0a1db57f6c281ee8e866073bd4f7131cadb92b61f9ba6a9171bff217ae9722259cb9381c91f826edd3cce3f958f9fd9a2437

    • SSDEEP

      24576:NTRRgkObgBSIiAZQ18oVHA4zJcwPZTR51+Lcetl:NTznniAZFoVHA4d1Zt5A

    Score
    10/10
    cerberransomwareupx

    • Cerber

      Cerber is a widely used ransomware-as-a-service (RaaS), first seen in 2017.

      ransomwarecerber

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks