General
- Target atlaspermspoofer.exe
- Size 1.7MB
- Sample260724-1ce7esfq2s
- SHA256 433369606735f70b1347fa9fdfe3974f947ef54a2075d6ad5abcf9a25d9879d4
- MD5 0a8ff418f50b7c47be5bf918d3cf5ae0
- SHA1 83df8db291eb2544d4c4bda3639ca0c34d5adbc2
- SHA512 e55155b4f4980cd4420483216be725af69125cf8e0d5da1ae8c13d2791491010bc55dfbebb15baffbd502c5e4aa3368d94a4622948c7bf81af9ce0e5d38d63df
- SSDEEP 24576:O7vwe+8ljws5G8Nc9sOgSNMMFJAyAL+3Xw2PP6MReN/IAUqNOmNAFwa/k:OgqdG8Nc9sOxtJVw2nzA3s/
- TLSH T127854C4BE7A721E4D876D1788592232AF970786883349BD7739C450A0F32BF4AE3E754
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
atlaspermspoofer.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
atlaspermspoofer.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target atlaspermspoofer.exe
- Size 1.7MB
- SHA256 433369606735f70b1347fa9fdfe3974f947ef54a2075d6ad5abcf9a25d9879d4
- MD5 0a8ff418f50b7c47be5bf918d3cf5ae0
- SHA1 83df8db291eb2544d4c4bda3639ca0c34d5adbc2
- SHA512 e55155b4f4980cd4420483216be725af69125cf8e0d5da1ae8c13d2791491010bc55dfbebb15baffbd502c5e4aa3368d94a4622948c7bf81af9ce0e5d38d63df
- SSDEEP 24576:O7vwe+8ljws5G8Nc9sOgSNMMFJAyAL+3Xw2PP6MReN/IAUqNOmNAFwa/k:OgqdG8Nc9sOxtJVw2nzA3s/
- TLSH T127854C4BE7A721E4D876D1788592232AF970786883349BD7739C450A0F32BF4AE3E754
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: Cerber
Cerber is a widely used ransomware-as-a-service (RaaS), first seen in 2017.
-
Executes dropped EXE
-
Drops file in System32 directory