Categories: Malware

Babar.23461 (B) information

The Babar.23461 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Babar.23461 (B) virus can do?

Executable code extraction
Injection (inter-process)
Injection (Process Hollowing)
Presents an Authenticode digital signature
Creates RWX memory
A process created a hidden window
Uses Windows utilities for basic functionality
Executed a process and injected code into it, probably while unpacking
Installs itself for autorun at Windows startup
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Babar.23461 (B)?


File Info:
crc32: 17EB4196md5: 669c8e51cff34c06405fc8640895979bname: 669C8E51CFF34C06405FC8640895979B.mlwsha1: 519d8be5b76a9e18703bcdbff3975b700e25affasha256: 5f1b0b4cb01e68d6edce2d92e0935363bfb2a8f5601a53c40a4d51c028e6599csha512: e6435056d5e88c676831eead3bb27b616ad75fc6835b8838a4b29865440fd125538107dab6d4f092e86cdcc800b90cb07d328cccf90dd2c9309bfdf9105e014essdeep: 3072:krUbfrh/TP/lpDbIqUKQ0yzMrPye1TMhj4fujyaVzmP38Juv:JbFLP/bXHUFzAae1bujL9w8J+type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Version Info:
0: [No Data]

Babar.23461 (B) also known as:

Bkav	W32.malware.sig1
Elastic	malicious (high confidence)
McAfee	W32/PinkSbot-HF!669C8E51CFF3
Cylance	Unsafe
Sangfor	Malware
K7AntiVirus	Spyware ( 0040f0131 )
BitDefender	Gen:Variant.Babar.23461
K7GW	Spyware ( 0040f0131 )
CrowdStrike	win/malicious_confidence_60% (D)
Arcabit	Trojan.Babar.D5BA5
ESET-NOD32	a variant of Win32/Kryptik.HICW
Cynet	Malicious (score: 100)
MicroWorld-eScan	Gen:Variant.Babar.23461
Rising	Trojan.Generic@ML.94 (RDML:Y659pfYGmol2lC9YJKww6Q)
Ad-Aware	Gen:Variant.Babar.23461
Sophos	ML/PE-A + Mal/EncPk-APV
DrWeb	BackDoor.Qbot.561
McAfee-GW-Edition	Artemis!Trojan
FireEye	Generic.mg.669c8e51cff34c06
Emsisoft	Gen:Variant.Babar.23461 (B)
MAX	malware (ai score=80)
Antiy-AVL	GrayWare/Win32.Kryptik.ehls
Kingsoft	Win32.Troj.Banker.(kcloud)
Microsoft	Trojan:Win32/Wacatac.B!ml
GData	Gen:Variant.Babar.23461
VBA32	BScope.Trojan.Encoder
eGambit	Unsafe.AI_Score_68%
Fortinet	W32/Kryptik.HDNN!tr