Categories: Malware

What is “Barys.355768”?

The Barys.355768 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Barys.355768 virus can do?

Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
CAPE detected the shellcode get eip malware family
Binary file triggered YARA rule
Yara detections observed in process dumps, payloads or dropped files

How to determine Barys.355768?


File Info:
name: 58B8CC844156A361BD89.mlwpath: /opt/CAPEv2/storage/binaries/ffed0f5f2d8e602a2144832245bf0565fd160f197fc41ecec2405b10684f5046crc32: A12E8E68md5: 58b8cc844156a361bd89dd797738942dsha1: 042a82e6baffc0d1432a99d8a1ae612a6f72ec16sha256: ffed0f5f2d8e602a2144832245bf0565fd160f197fc41ecec2405b10684f5046sha512: 7de654df4e526b8e70a104d3c08c6707a57ed8d33173b91ad0201dd76fb3627c02fffbbf46b1af8a38920372c682a9557e8d0d2c39cc5a2f73ec9d0cde3c8c40ssdeep: 98304:rtkSlrJSx0KSQNGc4E9PjKjT5QZvG0NDxx6JBAUZLH2M:r3Ne0P8Xe8G0N9x6JV3type: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T19456BF12F643C072D46601B5957B573D5A399E204710C9D3FBECBD689F32AE1A23A38Esha3_384: 3697adf60214289b8efce41914d4165ea02a2619e39d4bee184ff63f665f988a745320adfb30632f61ca2ecb69550939ep_bytes: 558bec6aff689010990068a851500064timestamp: 2023-11-03 13:35:28
Version Info:
FileVersion: 1.0.0.0FileDescription: 易语言程序ProductName: 彩虹ProductVersion: 1.0.0.0LegalCopyright: 作者版权所有 请尊重并使用正版Comments: 本程序使用易语言编写(http://www.dywt.com.cn)Translation: 0x0804 0x04b0

Barys.355768 also known as:

Bkav	W32.AIDetectMalware
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Barys.355768
FireEye	Generic.mg.58b8cc844156a361
Skyhigh	BehavesLike.Win32.Generic.th
McAfee	Artemis!58B8CC844156
Malwarebytes	Generic.Malware.AI.DDS
Sangfor	Suspicious.Win32.Save.ins
K7AntiVirus	Trojan ( 005246d51 )
Alibaba	Trojan:Win32/HacktoolX.9f595653
K7GW	Trojan ( 005246d51 )
CrowdStrike	win/malicious_confidence_90% (D)
BitDefenderTheta	Gen:NN.ZexaF.36802.@t0@aKhp7roj
Symantec	ML.Attribute.HighConfidence
tehtris	Generic.Malware
ESET-NOD32	a variant of Win32/Packed.FlyStudio.AA potentially unwanted
APEX	Malicious
ClamAV	Win.Malware.Gotango-7000352-0
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Gen:Variant.Barys.355768
Avast	Win32:HacktoolX-gen [Trj]
Sophos	Mal/Generic-S
VIPRE	Gen:Variant.Barys.355768
Trapmine	malicious.moderate.ml.score
Emsisoft	Gen:Variant.Barys.355768 (B)
Ikarus	Trojan.Win32
ALYac	Gen:Variant.Barys.355768
Varist	W32/Agent.EW.gen!Eldorado
Antiy-AVL	RiskWare/Win32.FlyStudio.a
Microsoft	Trojan:Win32/Wacatac.B!ml
Xcitium	TrojWare.Win32.TrojanDropper.Agent.HNMS@4xnjpy
Arcabit	Trojan.Barys.D56DB8
ZoneAlarm	HEUR:Trojan.Win32.Generic
GData	Win32.Trojan.PSE.1TYMTF4
Cynet	Malicious (score: 100)
AhnLab-V3	Malware/Win.Generic.R607766
VBA32	BScope.Trojan.Dynamer
Google	Detected
MAX	malware (ai score=82)
Cylance	unsafe
Panda	Trj/GdSda.A
Rising	Trojan.Generic!8.C3 (CLOUD)
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/CoinMiner.PHP!tr
AVG	Win32:HacktoolX-gen [Trj]
Cybereason	malicious.44156a
DeepInstinct	MALICIOUS
alibabacloud	Trojan:Win/Barys