Malware

Cerbu.53763 (B) malicious file

Malware Removal

The Cerbu.53763 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Cerbu.53763 (B) virus can do?

  • At least one process apparently crashed during execution
  • Yara rule detections observed from a process memory dump/dropped files/CAPE
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Network activity detected but not expressed in API logs

Related domains:

wpad.local-net

How to determine Cerbu.53763 (B)?


File Info:

name: 32B4D2966D5CB19DCC66.mlw
path: /opt/CAPEv2/storage/binaries/9a917a032e71d4f191dfcb27231b01b3b73b21889cbb0195647d1d36622dbeab
crc32: A8862CF7
md5: 32b4d2966d5cb19dcc6634cbb3efe9f4
sha1: 0a5e1d126f5f805efaf24621a1f12775ec229c22
sha256: 9a917a032e71d4f191dfcb27231b01b3b73b21889cbb0195647d1d36622dbeab
sha512: 031ecde7cc8a8a0fa03475eaa78c41315a4c89681efdc5ba8533be55088f00c6ee187d4356bf7dc66bf789e423a6fe9cbda46811612e4a2ff9c5184be1c0ea78
ssdeep: 98304:iSKPsAyJWYeeZdEjMhjTlSuN19vqVd+oA3w9UG:vWNkDtTIqzvqVd+Vw2
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T186F522650A73EC9ECF32A73A611226BA1951FCF7A86F935B1D972F507024042C768FD2
sha3_384: b8a4eecb382f7cf645f4d95b58c5327bed03b93a683b066cc7faa65b830c6f7365086db7e0c7a73ecfda5e2d0b1ce2b6
ep_bytes: 558d6c249881ec0c02000056e96f0200
timestamp: 2021-11-23 10:20:45

Version Info:

0: [No Data]

Cerbu.53763 (B) also known as:

BkavW32.AIDetect.malware1
Elasticmalicious (high confidence)
DrWebTrojan.PackedENT.124
MicroWorld-eScanGen:Variant.Cerbu.53763
FireEyeGeneric.mg.32b4d2966d5cb19d
CAT-QuickHealTrojan.Wacatac.S15862760
McAfeeGenericRXIP-KU!32B4D2966D5C
CylanceUnsafe
SangforSuspicious.Win32.Save.a
K7AntiVirusTrojan ( 0056cc351 )
K7GWTrojan ( 0056cc351 )
Cybereasonmalicious.66d5cb
BitDefenderThetaGen:NN.ZexaF.34294.ytW@aCp!6Rf
CyrenW32/S-0cb2f1a4!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Kryptik.GOGM
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderGen:Variant.Cerbu.53763
NANO-AntivirusVirus.Win32.Gen.ccmw
AvastWin32:Xpirat-B [Inf]
Ad-AwareGen:Variant.Cerbu.53763
SophosML/PE-A + Troj/AGent-BFHO
McAfee-GW-EditionBehavesLike.Win32.Generic.wc
EmsisoftGen:Variant.Cerbu.53763 (B)
IkarusTrojan.Win32.Crypt
GDataGen:Variant.Cerbu.53763
AviraTR/Crypt.EPACK.Gen2
MAXmalware (ai score=80)
Antiy-AVLTrojan/Generic.ASBOL.C639
MicrosoftTrojan:Win32/Sabsik.FL.B!ml
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win32.Kryptik.R346633
VBA32BScope.Trojan.PackedENT
ALYacGen:Variant.Cerbu.53763
MalwarebytesTrojan.Crypt.Generic
APEXMalicious
RisingMalware.Heuristic!ET#100% (RDMK:cmRtazrVVXWkgto14EYs5W/jngho)
SentinelOneStatic AI – Suspicious PE
eGambitUnsafe.AI_Score_98%
FortinetW32/Kryptik.GOGM!tr
AVGWin32:Xpirat-B [Inf]
CrowdStrikewin/malicious_confidence_70% (D)
Qihoo-360HEUR/QVM19.1.7BDF.Virus.Win32.Sality

How to remove Cerbu.53763 (B)?

Cerbu.53763 (B) removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment