Categories: Malware

Barys.193426 malicious file

The Barys.193426 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Barys.193426 virus can do?

Sample contains Overlay data
Drops a binary and executes it
Unconventionial language used in binary resources: Chinese (Simplified)
Authenticode signature is invalid
CAPE detected the shellcode get eip malware family
Yara detections observed in process dumps, payloads or dropped files

How to determine Barys.193426?


File Info:
name: B9589B20E9C007487266.mlwpath: /opt/CAPEv2/storage/binaries/11f59b4c42deda79f1f09d7eb201335fe195e8accfaaa303b358ca28d7ac3f63crc32: 9CDD0DA7md5: b9589b20e9c0074872664c0254612c3asha1: aa4bb0b2742ebc42fdc947895340d3b9ce3e9557sha256: 11f59b4c42deda79f1f09d7eb201335fe195e8accfaaa303b358ca28d7ac3f63sha512: dee8ba7c55e95470ebbd64d18f1f679473264918935dcf6e643f0daff87faded39ab52e8a551425db82f690a64325cdbe9f8858aefacef6488e1bd8ab00a471dssdeep: 6144:Q66v1UNIPcmmmRm4EG76adSNc/B9XgGJ2FxQ:HwEmREGO8oc/B9QLQtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T159F4AE137BE0C077D642443189A65FB6FFFBE2340E6685875368CE1CDF319A1C52A62Asha3_384: ab2e122c7f958457cf00534835b9b5f56a006513af909403e580b1e087d113944cecd6312a828def7aafc3a0aaf024c8ep_bytes: 558bec6aff68f0704000682034400064timestamp: 2012-01-14 14:09:57
Version Info:
Comments: CompanyName: Shenzhen QVOD Technology Co.,LtdFileDescription: QvodInstall ModuleFileVersion: 4, 0, 4, 6InternalName: QvodInstall.exeLegalCopyright: Copyright(C) 2006-2012 QVODLegalTrademarks: OriginalFilename: QvodInstall.exePrivateBuild: ProductName: QvodInstall ModuleProductVersion: 4, 0, 4, 6SpecialBuild: Translation: 0x0409 0x0000

Barys.193426 also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Rimod.b!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Barys.193426
FireEye	Generic.mg.b9589b20e9c00748
CAT-QuickHeal	Trojan.IgenericRI.S27872755
Skyhigh	BehavesLike.Win32.Dropper.bz
McAfee	GenDownloader.oj
Cylance	unsafe
VIPRE	Gen:Variant.Barys.193426
Sangfor	Dropper.Win32.Agent.Vuf8
K7AntiVirus	Trojan ( 005203381 )
Alibaba	TrojanDropper:Win32/Rimod.2554df15
K7GW	Trojan ( 005203381 )
Cybereason	malicious.0e9c00
BitDefenderTheta	Gen:NN.ZexaF.36802.pqW@aW9HLrab
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	Win32/TrojanDropper.Agent.PRE
APEX	Malicious
TrendMicro-HouseCall	TSPY_DOWNLOADER_BL132B39.TOMC
ClamAV	Win.Dropper.Genericrxeo-9849932-0
Kaspersky	Trojan-Dropper.Win32.Agent.bjvcpv
BitDefender	Gen:Variant.Barys.193426
NANO-Antivirus	Trojan.Win32.Rimod.crgjki
Avast	Win32:Evo-gen [Trj]
Tencent	Trojan.Win32.Qvod.kal
TACHYON	Trojan-Downloader/W32.Qvod.727680
Emsisoft	Gen:Variant.Barys.193426 (B)
Baidu	Win32.Trojan-Dropper.Agent.s
F-Secure	Trojan.TR/Rimod.AJ.1
DrWeb	Trojan.DownLoader25.31573
Zillya	Dropper.Agent.Win32.114248
TrendMicro	TSPY_DOWNLOADER_BL132B39.TOMC
Trapmine	malicious.high.ml.score
Sophos	Mal/Generic-S
Ikarus	Trojan-Dropper.Win32.Agent
Jiangmin	Trojan/Generic.ahrto
Google	Detected
Avira	TR/Rimod.AJ.1
Varist	W32/Rimod.A.gen!Eldorado
Antiy-AVL	Trojan/Win32.Rimod
Kingsoft	Win32.HeurC.KVM003.a
Microsoft	TrojanDownloader:Win32/Troxen!rts
Xcitium	TrojWare.Win32.Rimod.aj@4tvs05
Arcabit	Trojan.Barys.D2F392
ViRobot	Trojan.Win32.Z.Qvod.727680.L
ZoneAlarm	Trojan-Dropper.Win32.Agent.bjvcpv
GData	Gen:Variant.Barys.193426
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win32.Downloader.R20670
VBA32	TrojanDownloader.Qvod
ALYac	Gen:Variant.Barys.193426
MAX	malware (ai score=100)
Malwarebytes	Generic.Malware.AI.DDS
Panda	Trj/Genetic.gen
Rising	Trojan.DL.Win32.AVPlayer.a (CLASSIC)
Yandex	Trojan.GenAsa!rD/75XOjNFg
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Qvod.PRE!tr.dldr
AVG	Win32:Evo-gen [Trj]
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_100% (W)
alibabacloud	Trojan[dropper]:Win/Barys