General

  • Target
    atlaspermspoofer.exe
  • Size 1.7MB
  • Sample260724-1ce7esfq2s
  • SHA256 433369606735f70b1347fa9fdfe3974f947ef54a2075d6ad5abcf9a25d9879d4
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      atlaspermspoofer.exe
    • Size 1.7MB
    • SHA256 433369606735f70b1347fa9fdfe3974f947ef54a2075d6ad5abcf9a25d9879d4
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Family: Cerber

      Cerber is a widely used ransomware-as-a-service (RaaS), first seen in 2017.

    • Executes dropped EXE

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v16

Tasks