Cerber ransomware: new, but mature | Malwarebytes Labs
Tags
country: Armenia Azerbaijan Belarus Georgia Kazakhstan Kyrgyzstan Laos Moldova Tajikistan Uzbekistan Russia Turkmenistan Ukraine
attack-pattern: Data Ip Addresses - T1590.005 Malicious File - T1204.002 Malware - T1587.001 Malware - T1588.001 Server - T1583.004 Server - T1584.004 Software - T1592.002 Tool - T1588.002
Show in Graph
Common Information
Type Value
UUID c16993f8-3d20-4995-846c-695f16b96df4
Fingerprint 3f273010bcad369d
Analysis status DONE
Considered CTI value 2
Text language
Published March 11, 2016, midnight
Added to db Sept. 26, 2022, 9:32 a.m.
Last updated Nov. 17, 2024, 6:49 p.m.
Headline Cerber ransomware: new, but mature
Title Cerber ransomware: new, but mature | Malwarebytes Labs
Detected Hints/Tags/Attributes 59/2/16
Source URLs
Redirection Url
Details Source https://blog.malwarebytes.com/threat-analysis/2016/03/cerber-ransomware-new-but-mature/
Details Source https://blog.malwarebytes.org/threat-analysis/2016/03/cerber-ransomware-new-but-mature/
URL Provider
Details Provider Source level domain
Details malwarebytes.com blog.malwarebytes.com
Details malwarebytes.org blog.malwarebytes.org
Attributes
Details Type #Events CTI Value
Details Domain 123 
ipinfo.io
Details File 1 
csrstub.exe
Details File 1 
dinotify.exe
Details File 1 
ndadmin.exe
Details File 2 
setx.exe
Details File 5 
rasdial.exe
Details File 3 
relpost.exe
Details File 22 
ntkrnlpa.exe
Details File 7 
square.bmp
Details File 5 
h.exe
Details File 748 
kernel32.dll
Details File 1260 
explorer.exe
Details File 8 
d3d9.dll
Details md5 1 
f5146a3bbe6c71e5a0ef2f04f955b1a1
Details md5 1 
2f7059d7b1dda3080e391d99788fff18
Details md5 1 
9a7f87c91bf7e602055a5503e80e2313