Categories: Malware

About “Babar.112692” infection

The Babar.112692 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Babar.112692 virus can do?

Behavioural detection: Executable code extraction – unpacking
Yara rule detections observed from a process memory dump/dropped files/CAPE
CAPE extracted potentially suspicious content
Unconventionial language used in binary resources: Tswana
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Checks the presence of disk drives in the registry, possibly for anti-virtualization

How to determine Babar.112692?


File Info:
name: 1B5757F6BF45612B1CB7.mlwpath: /opt/CAPEv2/storage/binaries/d45188226339c4b1a093548c038e3c5650be473fad407d8c5d9e31044ac7026fcrc32: A0202415md5: 1b5757f6bf45612b1cb723dde0c91a23sha1: f36fdf71ab2406f28ea17cc053f4cad27f5adfdasha256: d45188226339c4b1a093548c038e3c5650be473fad407d8c5d9e31044ac7026fsha512: c31e4888061fd7da9f4a806afe055a434754f03e7bbedf8aa1c80ed9a1ebd633d07b79a5d826e47910211591423e39b557657670b07a2a65fe7cd1497e53516bssdeep: 3072:/HXOsq5Kx+UIX15RPtxYH+QnEmJtUyG2jvbiwHO/hnSMM/h31:vfqTpPtIbJrj2wH4hnSMtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T19144CF31B581FC71C485F530483ACFA11ABEBC311965894377A83BAEAE713D1B66621Fsha3_384: 0a12ce09843937c9de2963215f53dd94874498d237802d1d19dbf4ce8069cd5298f1bae7ff5d04b8cab60ff4f51d0a51ep_bytes: e8cc560000e978feffffcccccccccccctimestamp: 2021-09-02 18:14:43
Version Info:
FileVersions: 68.78.22.14InternationalName: povgwaoci.iweCopyright: Copyright (C) 2022, somoklosProjectVersion: 98.66.15.65

Babar.112692 also known as:

Bkav	W32.AIDetect.malware1
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Babar.112692
FireEye	Generic.mg.1b5757f6bf45612b
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
Cyren	W32/Kryptik.HUW.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
tehtris	Generic.Malware
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	UDS:Trojan.Win32.Chapak.gen
BitDefender	Gen:Variant.Babar.112692
Avast	DropperX-gen [Drp]
Ad-Aware	Gen:Variant.Babar.112692
Sophos	ML/PE-A + Troj/Krypt-RQ
McAfee-GW-Edition	BehavesLike.Win32.Lockbit.dh
Trapmine	malicious.high.ml.score
Ikarus	Trojan.Win32.Azorult
GData	Gen:Variant.Babar.112692
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
Google	Detected
Acronis	suspicious
MAX	malware (ai score=86)
Malwarebytes	Trojan.MalPack.GS
Rising	Trojan.Generic@AI.100 (RDML:e6JEOUb+xoj/N+25MV9/WQ)
SentinelOne	Static AI – Suspicious PE
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Kryptik.HHMP!tr
AVG	DropperX-gen [Drp]
CrowdStrike	win/malicious_confidence_100% (W)