General
- Target Perm Loader.exe
- Size 1.7MB
- Sample260601-vhdynaay7x
- SHA256 4fbf3b37e1e8271fda06e58389ff90dc575b1b2677cd74adc509fe39efab3877
- MD5 df5a343eb6b752152fd8675005be888e
- SHA1 2da7e5093109273e590238a0e96d95aaad5d6e0a
- SHA512 48391fad800220df0533d79433070c43804c55b489f0a2d03448aa28982a140a5733a04e5b66259ad00408001ffc60ce4ae40d17332ada7972a84428eaa65a31
- SSDEEP 24576:lby7vwe+8ljws5G8Nc9sOgSNMMFJAyAL+3Xw2PP6MReN/IAUqNOmNAFwa/k:lGgqdG8Nc9sOxtJVw2nzA3s/
- TLSH T149854C4BE7A320E4D876D1788592232AF9707C6883349BD7738845560F72BF4AE3EB54
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Perm Loader.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
Perm Loader.exe
Resource
win11-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target Perm Loader.exe
- Size 1.7MB
- SHA256 4fbf3b37e1e8271fda06e58389ff90dc575b1b2677cd74adc509fe39efab3877
- MD5 df5a343eb6b752152fd8675005be888e
- SHA1 2da7e5093109273e590238a0e96d95aaad5d6e0a
- SHA512 48391fad800220df0533d79433070c43804c55b489f0a2d03448aa28982a140a5733a04e5b66259ad00408001ffc60ce4ae40d17332ada7972a84428eaa65a31
- SSDEEP 24576:lby7vwe+8ljws5G8Nc9sOgSNMMFJAyAL+3Xw2PP6MReN/IAUqNOmNAFwa/k:lGgqdG8Nc9sOxtJVw2nzA3s/
- TLSH T149854C4BE7A320E4D876D1788592232AF9707C6883349BD7738845560F72BF4AE3EB54
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: Cerber
Cerber is a widely used ransomware-as-a-service (RaaS), first seen in 2017.
-
Executes dropped EXE
-
Drops file in System32 directory