Categories: Malware

Babar.25853 information

The Babar.25853 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Babar.25853 virus can do?

Executable code extraction
Presents an Authenticode digital signature
Creates RWX memory
Unconventionial language used in binary resources: Russian
The binary likely contains encrypted or compressed data.
Queries information on disks, possibly for anti-virtualization
Detects the presence of Wine emulator via registry key

Related domains:

ec2-52-29-33-28.eu-central-1.compute.amazonaws.com

How to determine Babar.25853?


File Info:
crc32: 43E70838md5: 6e92bd76882b46085df3cca4bfa91f32name: 6E92BD76882B46085DF3CCA4BFA91F32.mlwsha1: b516ddb10520cd7e01524dfb1fd8792b5b5ce6c0sha256: 1a17fdfdcb00fb52748efbc53ec0b175a2215ea64c9dfdf0d318b6dadd22f127sha512: c3fc02a1af16a4afc5a82d7a5d639ab85221c8e32ebd80d61907c09944aacf1c74708e46c6576281437d1e1234665912ee09c551752dc299db5863f06f731873ssdeep: 98304:eZvwa4MVDco+oPGct/htWA2oAWvcOuPq3eA1:qwa4qDcy96AfAWWA1type: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
0: [No Data]

Babar.25853 also known as:

K7AntiVirus	Trojan ( 005241d51 )
Elastic	malicious (high confidence)
DrWeb	Trojan.InstallCube.2671
Cynet	Malicious (score: 100)
CAT-QuickHeal	SwBundler.ICLoader.YB5
ALYac	Gen:Variant.Babar.25853
Cylance	Unsafe
Zillya	Adware.FileTour.Win32.34708
Sangfor	Suspicious.Win32.Save.a
K7GW	Trojan ( 005241d51 )
Cybereason	malicious.6882b4
Cyren	W32/ICLoader.DA.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Kryptik.GDCH
APEX	Malicious
Avast	Win32:DangerousSig [Trj]
ClamAV	Win.Packed.Icloader-6952325-0
Kaspersky	not-a-virus:HEUR:AdWare.Win32.Generic
BitDefender	Gen:Variant.Babar.25853
NANO-Antivirus	Trojan.Win32.InstallCube.exxflr
MicroWorld-eScan	Gen:Variant.Babar.25853
Tencent	Win32.Trojan.Falsesign.Wskg
Ad-Aware	Gen:Variant.Babar.25853
Sophos	Generic PUA LF (PUA)
Comodo	Application.Win32.ICLoader.GBSE@7ijpb2
BitDefenderTheta	Gen:NN.ZexaF.34236.@xX@aaRLwBzQ
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	GenericRXEO-DM!6E92BD76882B
FireEye	Generic.mg.6e92bd76882b4608
Emsisoft	Application.InstallMon (A)
SentinelOne	Static AI – Malicious PE
Avira	TR/Crypt.XPACK.Gen
Antiy-AVL	Trojan/Generic.ASMalwS.247133F
Microsoft	SoftwareBundler:Win32/ICLoader
Arcabit	Trojan.Babar.D64FD
GData	Gen:Variant.Babar.25853
AhnLab-V3	PUP/Win32.ICLoader.R221384
Acronis	suspicious
McAfee	GenericRXEO-DM!6E92BD76882B
MAX	malware (ai score=83)
VBA32	Trojan.InstallCube
Malwarebytes	Adware.FileTour
Panda	PUP/DownloadAssistant
Rising	Trojan.Kryptik!1.AFA6 (CLASSIC)
Yandex	Trojan.GenAsa!JexYhwpDbwY
Ikarus	PUA.FileTour
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/CoinMiner.GYQC!tr
AVG	Win32:DangerousSig [Trj]