Categories: Malware

Babar.28358 malicious file

The Babar.28358 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Babar.28358 virus can do?

A process created a hidden window
Executed a very long command line or script command which may be indicative of chained commands or obfuscation
A scripting utility was executed
Uses Windows utilities for basic functionality
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Babar.28358?


File Info:
crc32: 1466C051md5: d98258691cbd90c7e8a1f1ad6e4299d9name: D98258691CBD90C7E8A1F1AD6E4299D9.mlwsha1: 7c5ce00571ae02ce19593fed82a4ae366c532780sha256: 971b1aacb7b965649c9185ead9038b102974e1e283e6a17604ca522cb6e7ae43sha512: 492f1fc9b85a1521256dbadd778de211d69c30296dc3747eee5bab88f639db83efb0d4dd43325fff950aa1d38833e633be198f079ffb4d7a54fb67476a35838fssdeep: 48:6rlr14+ZzWTJ6KcI7y9wM4lES7VeDZDuIQZv8tWWJBmD1nx13aLlzUR:epnZz2QKPJZlxeDZKIGkYHV3aLlYRtype: PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Version Info:
LegalCopyright: xc3x201axc2xa9 2011-2021 Pete Batard (GPL v3)FileVersion: 3,17,1846,0CompanyName: Akeo ConsultingProductName: RufusProductVersion: 3,17,1846,0FileDescription: RufusFileTitle: RufusLegalTrademark: https://www.gnu.org/licenses/gpl-3.0.htmlTranslation: 0x0409 0x04b0

Babar.28358 also known as:

K7AntiVirus	Trojan ( 005883fd1 )
ALYac	Gen:Variant.Babar.28358
Malwarebytes	Trojan.Downloader
K7GW	Trojan ( 005883fd1 )
Cybereason	malicious.91cbd9
ESET-NOD32	a variant of Win32/Agent.ADMO
APEX	Malicious
Avast	Win32:PWSX-gen [Trj]
Cynet	Malicious (score: 100)
Kaspersky	VHO:Backdoor.Win32.DcRat.gen
BitDefender	Gen:Variant.Babar.28358
MicroWorld-eScan	Gen:Variant.Babar.28358
Ad-Aware	Gen:Variant.Babar.28358
BitDefenderTheta	Gen:NN.ZexaE.34266.aq0@aqsqUMki
FireEye	Gen:Variant.Babar.28358
Emsisoft	Gen:Variant.Babar.28358 (B)
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
Arcabit	Trojan.Babar.D6EC6
GData	Gen:Variant.Babar.28358
AhnLab-V3	Trojan/Win.Generic.C4639862
McAfee	GenericRXQB-TQ!D98258691CBD
MAX	malware (ai score=83)
VBA32	BScope.Trojan.Nitol
Rising	Trojan.Generic@ML.92 (RDML:j4HPKW8QGRW4dSN3F/MozQ)
Ikarus	Trojan-Dropper.MSIL.Agent
Fortinet	W32/Tiny.NFR!tr
AVG	Win32:PWSX-gen [Trj]