Overview

overview

10

Static

static

3

Perm Loader.exe

windows10-ltsc 2021-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Perm Loader.exe

  • Size

    1.7MB

  • Sample

    250204-bs1evszpct

  • MD5

    fc5c5d2f6ee523409634bdb29c1cd55d

  • SHA1

    64cd50530fcdea7f5770ea71204dd5f30e7f18f4

  • SHA256

    42dc6803eee98170b645149a8ca77c30028d9e133ae629449800c778c1ba0e43

  • SHA512

    d60246681e010e7cef75d35ed52681669989ab3458770ce5d0b4db37148363784533afb7bdf64b600967290244119c60c105cecf5b4a0f77a7628807f1c7d047

  • SSDEEP

    24576:V7vwe+8ljws5G8Nc9sOgSNMMFJAyAL+3Xw2PP6MReN/IAUqNOmNAFwa/k:VgqdG8Nc9sOxtJVw2nzA3s/

Score
10/10
cerberransomware

Malware Config

Targets

    • Target

      Perm Loader.exe

    • Size

      1.7MB

    • MD5

      fc5c5d2f6ee523409634bdb29c1cd55d

    • SHA1

      64cd50530fcdea7f5770ea71204dd5f30e7f18f4

    • SHA256

      42dc6803eee98170b645149a8ca77c30028d9e133ae629449800c778c1ba0e43

    • SHA512

      d60246681e010e7cef75d35ed52681669989ab3458770ce5d0b4db37148363784533afb7bdf64b600967290244119c60c105cecf5b4a0f77a7628807f1c7d047

    • SSDEEP

      24576:V7vwe+8ljws5G8Nc9sOgSNMMFJAyAL+3Xw2PP6MReN/IAUqNOmNAFwa/k:VgqdG8Nc9sOxtJVw2nzA3s/

    Score
    10/10
    cerberransomware

    • Cerber

      Cerber is a widely used ransomware-as-a-service (RaaS), first seen in 2017.

      ransomwarecerber

    • Cerber family

      cerber

    • Executes dropped EXE

    • Drops file in System32 directory

    behavioral1

MITRE ATT&CK Matrix

Tasks