⚠
Cerber
ransomware1 mutex signatures
[BASIC_INFORMATION]
FAMILY_NAME:
Cerber
CATEGORY:
RANSOMWARE
DESCRIPTION:
Cerber is a Ransomware-as-a-Service (RaaS) that appeared in 2016, known for its file encryption, offline capabilities, and sophisticated evasion techniques. It creates a mutex to avoid reinfecting the same machine.
ALIASES:
Cerber Ransomware
TAGS:
raasfile_encryptionwindowsevasion
[MUTEX_SIGNATURES](1)
[MUTEX_01]
SHELL.{<uuid>}
ANALYST: @adhikara13 DATE: 2025-07-13
REFERENCES:
[QUICK_ACTIONS]
[THREAT_INTELLIGENCE]
ATTRIBUTION:
⚠Unknown
FIRST_OBSERVED:
2016
[SIGMA_RULE]
[STATISTICS]
MUTEX_COUNT:1
THREAT_ACTORS:1
ALIASES:1
TAGS:4
CATEGORY:RANSOMWARE
Malware profile loaded successfully