Malware

Malware.AI.1350675839 (file analysis)

Malware Removal

The Malware.AI.1350675839 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.1350675839 virus can do?

  • Reads data out of its own binary image
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • Authenticode signature is invalid
  • A scripting utility was executed
  • Deletes executed files from disk
  • Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Malware.AI.1350675839?


File Info:

name: 0924BE1ABB4008E62DA7.mlw
path: /opt/CAPEv2/storage/binaries/0097389898ef03c55cfda3afed5d2551001125c6544ce01252819a1c89f4f54b
crc32: 9952E172
md5: 0924be1abb4008e62da7ce39644a0e39
sha1: 1ca5a572664fa42c8d7d037f2c4adcbd6263eb19
sha256: 0097389898ef03c55cfda3afed5d2551001125c6544ce01252819a1c89f4f54b
sha512: dd8dad30943090c528fd52bab1e894edcfc3bf78f36a9c2d6a2baf5aefcd36946572ba51c8052dbba23b71769543a475443ebdb8fa622cec27c5be92f67724dd
ssdeep: 768:GXJ3c4kvV9ueEILrO3+JJ3Cnm8R/NBQE2O8OscTdyJW2SYR:GXJ66eEOOQ0np/NKE2OKNJW6
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1ED233B47B5443C95C42BA871AC7EDEA212777C5D83500BCA35AE3D1E2DF6280363A79E
sha3_384: 94825af90de3eb35ea306644d7e46725a369e5fe664f72dacbdfb5be19cfc728c9a84bddb2f165917b37aa4ee2a9eb4f
ep_bytes: 60be00a041008dbe0070feff5783cdff
timestamp: 2009-06-10 07:25:06

Version Info:

0: [No Data]

Malware.AI.1350675839 also known as:

BkavW32.Common.582914C3
LionicHacktool.Win32.Jakuz.lpGG
Elasticmalicious (moderate confidence)
MalwarebytesMalware.AI.1350675839
ZillyaTool.Jakuz.Win32.212
SangforTrojan.Win32.Agent.V3fq
K7AntiVirusTrojan ( 004baa5b1 )
AlibabaTrojan:Win32/Generic.c0595542
K7GWTrojan ( 004baa5b1 )
Cybereasonmalicious.2664fa
APEXMalicious
NANO-AntivirusTrojan.Win32.VB.ctjhd
SUPERAntiSpywareTrojan.Agent/Generic
AvastWin32:Malware-gen
McAfee-GW-EditionGenericRXJM-CL!80D3A094932A
Trapminemalicious.moderate.ml.score
FireEyeGeneric.mg.0924be1abb4008e6
SophosGeneric Reputation PUA (PUA)
IkarusTrojan.Win32.SuspectCRC
JiangminTrojan/Cosmu.gze
XcitiumTrojWare.Win32.Injector.AJLV@54kgar
GoogleDetected
VBA32TrojanDropper.VB
Cylanceunsafe
TrendMicro-HouseCallTROJ_GEN.R002H06H723
RisingTrojan.Generic@AI.99 (RDML:pBIv3p77uFKDfqQBb7ST2w)
YandexTrojan.GenAsa!FBsF+KltpXc
SentinelOneStatic AI – Suspicious PE
MaxSecureTrojan.Malware.192612997.susgen
FortinetW32/PossibleThreat
AVGWin32:Malware-gen
DeepInstinctMALICIOUS
CrowdStrikewin/malicious_confidence_60% (W)

How to remove Malware.AI.1350675839?

Malware.AI.1350675839 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment