Resubmissions

02-02-2025 22:33

250202-2ghzjszre1 10

02-02-2025 22:30

250202-2es2qszraw 8

General

  • Target

    https://cdn.discordapp.com/attachments/1258664963208118294/1258682098513088583/Perm_Unban.rar?ex=67a1154d&is=679fc3cd&hm=55f7267b0c20251602438c17dc69cd14a435b8a10e8b25512eefd18e6844f8be&

  • Sample

    250202-2ghzjszre1

Malware Config

Targets

    • Target

      https://cdn.discordapp.com/attachments/1258664963208118294/1258682098513088583/Perm_Unban.rar?ex=67a1154d&is=679fc3cd&hm=55f7267b0c20251602438c17dc69cd14a435b8a10e8b25512eefd18e6844f8be&

    • Cerber

      Cerber is a widely used ransomware-as-a-service (RaaS), first seen in 2017.

    • Cerber family

    • Executes dropped EXE

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks