Overview

overview

10

Static

static

3

Perm Loader.exe

windows7-x64

1

Perm Loader.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Perm Loader.exe

  • Size

    1.7MB

  • Sample

    241226-yvqprsxpct

  • MD5

    3292a5cefd93bed0c7696e2f08a31be8

  • SHA1

    d9947b9bee3ce3bc9f4317682190d93ab9c691b1

  • SHA256

    3b3b6bc308e28e71b72cd2d206243ea6d853506c972a95638299c1ff30581015

  • SHA512

    2f940b48fff8f9010f8e9e4944093de085fd62a82cc2fc0caa34441cc2f6d5bf66672e6cdbcb63c286bdc008d2300e50dc4b47b194a174525ddd8ca732a49f0b

  • SSDEEP

    24576:E7vwe+8ljws5G8Nc9sOgSNMMFJAyAL+3Xw2PP6MReN/IAUqNOmNAFwa/k:EgqdG8Nc9sOxtJVw2nzA3s/

Score
10/10
cerberransomware

Malware Config

Targets

    • Target

      Perm Loader.exe

    • Size

      1.7MB

    • MD5

      3292a5cefd93bed0c7696e2f08a31be8

    • SHA1

      d9947b9bee3ce3bc9f4317682190d93ab9c691b1

    • SHA256

      3b3b6bc308e28e71b72cd2d206243ea6d853506c972a95638299c1ff30581015

    • SHA512

      2f940b48fff8f9010f8e9e4944093de085fd62a82cc2fc0caa34441cc2f6d5bf66672e6cdbcb63c286bdc008d2300e50dc4b47b194a174525ddd8ca732a49f0b

    • SSDEEP

      24576:E7vwe+8ljws5G8Nc9sOgSNMMFJAyAL+3Xw2PP6MReN/IAUqNOmNAFwa/k:EgqdG8Nc9sOxtJVw2nzA3s/

    Score
    10/10
    cerberransomware

    • Cerber

      Cerber is a widely used ransomware-as-a-service (RaaS), first seen in 2017.

      ransomwarecerber

    • Cerber family

      cerber

    • Executes dropped EXE

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks