Categories: Malware

About “Barys.87792” infection

The Barys.87792 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Barys.87792 virus can do?

Behavioural detection: Executable code extraction – unpacking
Unconventionial language used in binary resources: Arabic (Algeria)
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Barys.87792?


File Info:
name: 47E19734670944EAE39E.mlwpath: /opt/CAPEv2/storage/binaries/5c571f646222c2ede33d54f18c131c06885a6ddf506e60e2718f6e60100f6575crc32: 47162049md5: 47e19734670944eae39ea322254787d2sha1: b2080ff6413cd966da96cb97d3a4c4031ba10cb2sha256: 5c571f646222c2ede33d54f18c131c06885a6ddf506e60e2718f6e60100f6575sha512: b38ba371eea6d7b7d7eed703eb0be9906a2f63d697cc8bef6520a00a3b4fd0f85440b90c58ede5a8453268555100265e3e05b1e4e07bdb22342a12458413c6cassdeep: 12288:mcDf1CiFE57sO17VNmhTRfK/lCfIqsf4i8x+OMGHqF9b6:df1C82L1zmDR64i8x+OMGHqtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T104E48F113AAB909EF2F74E701D70B2961C3A7DA22D41C88934583529CFB6BD1ADB1737sha3_384: cd65d5bf6e35edf23ead791be618f853b7d743ad7950abd97c66576fcefbbd435812565e17ee8250ff59c5948898c92dep_bytes: 6840be4500e8eeffffff000048000000timestamp: 2021-06-05 13:08:53
Version Info:
Translation: 0x0409 0x04b0CompanyName: btProductName: IEMonitorFileVersion: 1.01.0002ProductVersion: 1.01.0002InternalName: ammOriginalFilename: amm.exe

Barys.87792 also known as:

Bkav	W32.AIDetect.malware2
Lionic	Trojan.MSIL.NanoBot.m!c
Elastic	malicious (moderate confidence)
MicroWorld-eScan	Gen:Variant.Barys.87792
McAfee	GenericRXAA-AA!47E197346709
Cylance	Unsafe
VIPRE	Gen:Variant.Barys.87792
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Trojan ( 004c84291 )
Alibaba	Trojan:Win32/Injector.2cade3bf
K7GW	Trojan ( 004c84291 )
Cybereason	malicious.467094
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Injector.DOEX
APEX	Malicious
Paloalto	generic.ml
Kaspersky	Trojan.Win32.Injuke.exwz
BitDefender	Gen:Variant.Barys.87792
Avast	Win32:RATX-gen [Trj]
Tencent	Malware.Win32.Gencirc.115c177e
Ad-Aware	Gen:Variant.Barys.87792
Emsisoft	Gen:Variant.Barys.87792 (B)
Zillya	Trojan.Injector.Win32.993734
McAfee-GW-Edition	BehavesLike.Win32.Trojan.bc
Trapmine	malicious.high.ml.score
FireEye	Generic.mg.47e19734670944ea
Sophos	Mal/Generic-S
SentinelOne	Static AI – Malicious PE
GData	Gen:Variant.Barys.87792
Jiangmin	TrojanSpy.AveMaria.oa
Google	Detected
Avira	HEUR/AGEN.1251435
MAX	malware (ai score=84)
Antiy-AVL	Trojan/Generic.ASMalwS.684C
Kingsoft	Win32.Heur.KVM003.a.(kcloud)
Arcabit	Trojan.Barys.D156F0
Microsoft	Trojan:Win32/Wacatac.B!ml
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win.Generic.R424339
BitDefenderTheta	Gen:NN.ZevbaF.34754.Sm0@aa5arpmO
ALYac	Gen:Variant.Barys.87792
VBA32	Malware-Cryptor.VB.gen.1
Malwarebytes	Spyware.PasswordStealer
Rising	Dropper.Generic!8.35E (TFE:4:3xE2VgSO21U)
Yandex	Trojan.Injector!twpAF2utnxw
Ikarus	Trojan.Win32.Krypt
MaxSecure	Trojan.Malware.12022411.susgen
Fortinet	W32/Injector.EHLH!tr
AVG	Win32:RATX-gen [Trj]
CrowdStrike	win/malicious_confidence_100% (W)