Categories: Malware

Cerbu.71351 (file analysis)

The Cerbu.71351 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Cerbu.71351 virus can do?

SetUnhandledExceptionFilter detected (possible anti-debug)
Dynamic (imported) function loading detected
Enumerates running processes
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine Cerbu.71351?


File Info:
name: 740666B73F865CB647A7.mlwpath: /opt/CAPEv2/storage/binaries/d93a8633dda21c78ea5eed815af4ca9cd366cc83122d71ca2c7cff0827106273crc32: 871DB0F3md5: 740666b73f865cb647a7bcae91dbf70esha1: 566129a88114654fa66c2bb495e198282828c17fsha256: d93a8633dda21c78ea5eed815af4ca9cd366cc83122d71ca2c7cff0827106273sha512: 77e240517e0478123c5756750deef39d199998158ae240fc5d92cb8866b18b748fed5abaf9f8273991c70366e6fcd703d8186678d79be558c07c4805d7fbcc4dssdeep: 1536:5eRNJqtlUORZyCGt4soASRPwK4BGSX1J1CusWISHEd09dl3NXgARj:5eRNEl3XsdcIK4Bv1bCN9MFNXgtype: PE32+ executable (GUI) x86-64, for MS Windowstlsh: T1CC935B9B62E530FDE4368239C4A11A29E372F83107219B6F07A456561F372D29D3EF72sha3_384: 424f3507205fee2aa5415400965bb17dad5b3f4b19654de4bbf49335d0a0e3e251112918acafa89cbb9c9e6853fa9b14ep_bytes: 4883ec28e85b0200004883c428e97afetimestamp: 2021-11-28 23:13:34
Version Info:
0: [No Data]

Cerbu.71351 also known as:

Elastic	malicious (high confidence)
ClamAV	Win.Exploit.Cerbu-9833538-0
ALYac	Gen:Variant.Cerbu.71351
BitDefender	Gen:Variant.Cerbu.71351
ESET-NOD32	a variant of Win64/Kryptik.CBC
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	VHO:Trojan.Win32.Pincav.gen
MicroWorld-eScan	Gen:Variant.Cerbu.71351
Ad-Aware	Gen:Variant.Cerbu.71351
Emsisoft	Gen:Variant.Cerbu.71351 (B)
F-Secure	Heuristic.HEUR/AGEN.1143106
FireEye	Generic.mg.740666b73f865cb6
GData	Gen:Variant.Cerbu.71351
Avira	HEUR/AGEN.1143106
MAX	malware (ai score=82)
Arcabit	Trojan.Cerbu.D116B7
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
Cylance	Unsafe
SentinelOne	Static AI – Suspicious PE
Fortinet	W64/Kryptik.CBC!tr
Cybereason	malicious.73f865