What is “Cerbu.111377”?

Malware Removal

The Cerbu.111377 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware - Review 2020

GridinSoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend to use GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the TRIAL period.
6-day free trial available.

What Cerbu.111377 virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Attempts to connect to a dead IP:Port (6 unique times)
  • At least one IP Address, Domain, or File Name was found in a crypto call
  • HTTP traffic contains suspicious features which may be indicative of malware related traffic
  • Performs some HTTP requests

Related domains:

iplogger.org
ocsp.comodoca.com
ocsp.usertrust.com
ip-api.com
ocsp.sectigo.com
evaexpand.com

How to determine Cerbu.111377?


File Info:

crc32: 111F9FFC
md5: 8a68b15e1ac9fb79edb7234c4c3a3d15
name: 8A68B15E1AC9FB79EDB7234C4C3A3D15.mlw
sha1: 44dba002891c289a4b6f3786ee6ffb78f36cf905
sha256: cb37fca86de8379826ad03e0aec2cb160b072a07e57b0090c67648c7602edd54
sha512: 66dc4fec06eae44b59f31ca6c40f91d4fa6d0aaa3b65734c53c251bc899acb07e955ab22cfb7200d0f78e7ac288f3bfab280c05646eef38ac5589b506f54e70a
ssdeep: 6144:uvBMpH/y7NvD29N0Nj2VaG8FhqA3fJN4pzsaaHqrs5:QMpfaD1Nj2VaGyhqAPT4pyAe
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Cerbu.111377 also known as:

BkavW32.AIDetect.malware2
Elasticmalicious (high confidence)
ALYacGen:Variant.Cerbu.111377
CylanceUnsafe
SangforTrojan.Win32.Save.a
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/GenKryptik.FFKQ
APEXMalicious
AvastWin32:CrypterX-gen [Trj]
CynetMalicious (score: 100)
KasperskyHEUR:Trojan.Win32.Bingoml.gen
BitDefenderGen:Variant.Cerbu.111377
MicroWorld-eScanGen:Variant.Cerbu.111377
TencentWin32.Trojan.Bingoml.Ebqu
Ad-AwareGen:Variant.Cerbu.111377
SophosGeneric ML PUA (PUA)
BitDefenderThetaGen:NN.ZexaF.34142.qyW@aKx8xWhi
McAfee-GW-EditionBehavesLike.Win32.BadFile.dm
FireEyeGeneric.mg.8a68b15e1ac9fb79
EmsisoftGen:Variant.Cerbu.111377 (B)
SentinelOneStatic AI – Malicious PE
WebrootW32.Malware.Gen
AviraTR/Kryptik.ymjwn
MicrosoftTrojan:Win32/Sabsik.TE.B!ml
ArcabitTrojan.Cerbu.D1B311
GDataGen:Variant.Cerbu.111377
McAfeeArtemis!8A68B15E1AC9
MAXmalware (ai score=82)
VBA32BScope.TrojanBanker.ClipBanker
MalwarebytesSpyware.PasswordStealer
PandaTrj/GdSda.A
RisingTrojan.Generic@ML.100 (RDML:LkWiYgjRytLP59CDwlN6YA)
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/GenKryptik.FFKQ!tr
AVGWin32:CrypterX-gen [Trj]

How to remove Cerbu.111377?

Cerbu.111377 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

Leave a Comment