Categories: Malware

Cerbu.194747 (file analysis)

The Cerbu.194747 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Cerbu.194747 virus can do?

Sample contains Overlay data
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Cerbu.194747?


File Info:
name: CB3D0FF0A6ACC5A196BB.mlwpath: /opt/CAPEv2/storage/binaries/cf2b2b694875d1046284ccedf342085d2930ccbe3f074c29844b2a26fc8eb5b0crc32: F9620664md5: cb3d0ff0a6acc5a196bba5854916c850sha1: 5db1fe16418d9fcf2008a45de35f4084cbff772dsha256: cf2b2b694875d1046284ccedf342085d2930ccbe3f074c29844b2a26fc8eb5b0sha512: 5d5306bc541c81d2f119a68fa5b606904665c2cce13004a373d0a925dc68e5c781f1e00cfac62980e0463f936162aad43887cf411772a1b72b3e250114228086ssdeep: 24576:1tg1mILKJ5m3pULRxu636NvVXDTZaqdiXSp0c02uFG6dAk3CMRr35:1OU3UBDTZaqdwk0c05HGiR75type: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1C285E001BBA280F7C606153004B6A739EA749F950A64CFD7B364FEBD3E325619C3716Asha3_384: 459d635544016aaf7aa36ac3740a403290f0e99e6faca7fb5a5f9e29a90187530a15da47cc16331dd8a4dd64d4fd5cc1ep_bytes: 558bec6aff68d0495500683451450064timestamp: 2013-04-07 06:26:48
Version Info:
0: [No Data]

Cerbu.194747 also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Generic.lwTm
MicroWorld-eScan	Gen:Variant.Cerbu.194747
FireEye	Generic.mg.cb3d0ff0a6acc5a1
Skyhigh	BehavesLike.Win32.Generic.th
McAfee	Artemis!CB3D0FF0A6AC
Cylance	unsafe
Sangfor	Trojan.Win32.Agent.Vu97
K7AntiVirus	Adware ( 005848221 )
Alibaba	Trojan:Win32/MalwareX.7984a9cd
K7GW	Adware ( 005848221 )
Cybereason	malicious.6418d9
Arcabit	Trojan.Cerbu.D2F8BB
BitDefenderTheta	Gen:NN.ZexaF.36608.SrZ@a81SLqh
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/Packed.FlyStudio.AA potentially unwanted
Cynet	Malicious (score: 100)
APEX	Malicious
ClamAV	Win.Trojan.Flystudio-9943951-0
Kaspersky	UDS:Backdoor.Win32.BlackHole
BitDefender	Gen:Variant.Cerbu.194747
Avast	Win32:MalwareX-gen [Trj]
Sophos	Mal/Generic-S
F-Secure	Trojan:W32/DelfInject.R
VIPRE	Gen:Variant.Cerbu.194747
TrendMicro	TROJ_GEN.R002C0WKT23
Trapmine	malicious.moderate.ml.score
Emsisoft	Gen:Variant.Cerbu.194747 (B)
Ikarus	Trojan.Win32
Jiangmin	TrojanDropper.Agent.awfg
Varist	W32/Trojan.CLL.gen!Eldorado
Avira	TR/Crypt.XPACK.Gen7
Antiy-AVL	Trojan/Win32.FlyStudio.a
Kingsoft	malware.kb.a.1000
Xcitium	Worm.Win32.Dropper.RA@1qraug
Microsoft	Trojan:Win32/Wacatac.B!ml
ZoneAlarm	UDS:Backdoor.Win32.BlackHole
GData	Win32.Application.PSE.1OV7PVV
Google	Detected
ALYac	Gen:Variant.Cerbu.194747
MAX	malware (ai score=86)
Malwarebytes	Generic.Malware.AI.DDS
Panda	Trj/Chgt.AD
TrendMicro-HouseCall	TROJ_GEN.R002C0WKT23
Yandex	Trojan.GenAsa!KVOHR8z+SG4
SentinelOne	Static AI – Malicious PE
MaxSecure	Dropper.Dinwod.frindll
Fortinet	W32/CoinMiner.PHP!tr
AVG	Win32:MalwareX-gen [Trj]
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_90% (W)