General

  • Target
    7690fb2f0595252e706f1e8c12c2e6453fbbd92d3ec2d53ea7ab472b05c76885
  • Size 159KB
  • Sample261029-mk17zaa18w
  • SHA256 7690fb2f0595252e706f1e8c12c2e6453fbbd92d3ec2d53ea7ab472b05c76885
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      AMIDEWINx64.EXE
    • Size 377KB
    • SHA256 2c67fb6eb81630c917f08295e4ff3b5f777cb41b26f7b09dc36d79f089e61bc4
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      Run.bat
    • Size 216B
    • SHA256 5a8585c1e5bf7d02be3590c94f7bf25804f9f9af3ee74e626c5d2b42b28650de
    • MD5 SHA1 SHA512 TLSH
    • Family: Cerber

      Cerber is a widely used ransomware-as-a-service (RaaS), first seen in 2017.

    • Target
      amifldrv64.sys
    • Size 28KB
    • SHA256 20f11a64bc4548f4edb47e3d3418da0f6d54a83158224b71662a6292bf45b5fb
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      amigendrv64.sys
    • Size 33KB
    • SHA256 38d87b51f4b69ba2dae1477684a1415f1a3b578eee5e1126673b1beaefee9a20
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      sn.bat
    • Size 1KB
    • SHA256 cf982fd519273de4e1ec7c0c43c119dfb10df2b31691b6178f6de0ff9b483a93
    • MD5 SHA1 SHA512 TLSH
    • Family: Cerber

      Cerber is a widely used ransomware-as-a-service (RaaS), first seen in 2017.

MITRE ATT&CK Enterprise v16

Tasks