Showing posts tagged #cerber

Return Home

Cerber is a popular ransomware that it's still active. In this blogpost, we will analyze and dump Cerber's config using the Cuckoo Sandbox for it. Prior analysis of Cerber already exist (like this one by Hasherezade). As state by Hasherezade, Cerber stores it's configuration in an RCDATA resource bundled in

Read More