Categories: Malware

Cerbu.152556 (file analysis)

The Cerbu.152556 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Cerbu.152556 virus can do?

The binary contains an unknown PE section name indicative of packing
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Cerbu.152556?


File Info:
name: 831935F1BD71E62A2A02.mlwpath: /opt/CAPEv2/storage/binaries/fc52364bb41b3627800dedf000fb2f936470bc7489e41b61c155f39803c6b750crc32: F7360261md5: 831935f1bd71e62a2a02ad34efbcfb7csha1: dc28262e8c16133a3ef37684d47c323200a50af5sha256: fc52364bb41b3627800dedf000fb2f936470bc7489e41b61c155f39803c6b750sha512: 2f282e885583c4ac0bee3512c395522296718d5fc849503e3f733351771e67bc205e45f960a4d3023279ef41ee2326f92c10ed859279dd533f0c31df646e3501ssdeep: 24576:d0S03hdn4XhItwsq2kQ4bvZY3u+XJXpCw:GSKXnkYe2khbS5ptype: PE32+ executable (console) x86-64, for MS Windowstlsh: T12B1523440094E56BCEF37DB8DA908A857F7F889873D198A747EE243A8F924E4E674344sha3_384: 3971ef617b23a0eeb1036965bcb8505ce4602e7b97213d434e1da947c6a734f851244b0d76b232bea1b74b09b70daf03ep_bytes: e903040000488b1c24eb0141e9120200timestamp: 2022-11-02 06:13:28
Version Info:
0: [No Data]

Cerbu.152556 also known as:

Lionic	Trojan.Win64.Convagent.4!c
MicroWorld-eScan	Gen:Variant.Cerbu.152556
FireEye	Generic.mg.831935f1bd71e62a
McAfee	Artemis!831935F1BD71
Cylance	Unsafe
Sangfor	Trojan.Win32.Agent.V9th
Cybereason	malicious.e8c161
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (moderate confidence)
Zoner	Probably Heur.ExeHeaderL
APEX	Malicious
Paloalto	generic.ml
Cynet	Malicious (score: 100)
Kaspersky	VHO:Trojan.Win64.Convagent.gen
BitDefender	Gen:Variant.Cerbu.152556
Avast	Win64:Malware-gen
Ad-Aware	Gen:Variant.Cerbu.152556
Emsisoft	Gen:Variant.Cerbu.152556 (B)
VIPRE	Gen:Variant.Cerbu.152556
McAfee-GW-Edition	BehavesLike.Win64.Generic.cc
Trapmine	malicious.high.ml.score
GData	Gen:Variant.Cerbu.152556
Arcabit	Trojan.Cerbu.D253EC
Microsoft	Trojan:Win32/Wacatac.B!ml
AhnLab-V3	Malware/Win.Generic.C5255665
ALYac	Gen:Variant.Cerbu.152556
MAX	malware (ai score=82)
TrendMicro-HouseCall	TROJ_GEN.R002H09K222
Rising	Trojan.Convagent!8.12323 (CLOUD)
Fortinet	W32/PossibleThreat
AVG	Win64:Malware-gen
Panda	Trj/Chgt.AD
CrowdStrike	win/malicious_confidence_70% (W)