Categories: Crack

What is “HackTool:Win32/Aicat.A!ml”?

The HackTool:Win32/Aicat.A!ml is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What HackTool:Win32/Aicat.A!ml virus can do?

  • A process attempted to delay the analysis task.
  • Attempts to connect to a dead IP:Port (5 unique times)
  • Drops a binary and executes it
  • Performs some HTTP requests
  • The binary likely contains encrypted or compressed data.
  • Uses Windows utilities for basic functionality
  • Installs itself for autorun at Windows startup
  • Creates a hidden or system file
  • Attempts to modify proxy settings
  • Creates a copy of itself

Related domains:

z.whorecord.xyz
a.tomx.xyz
iplogger.com
apps.identrust.com
crl.identrust.com
x1.c.lencr.org

How to determine HackTool:Win32/Aicat.A!ml?


File Info:

crc32: 6658F913md5: 2d51bd4f5e63bda102e7f48d86b73d14name: 2D51BD4F5E63BDA102E7F48D86B73D14.mlwsha1: 48a6b9ecbc28a1f2f49c3fffdaa536123b1c376asha256: 57bc80c6c4e19f76d5985eb5eacd8d6d94795c5776bb5c97505306dbe2875856sha512: 856dcf99bb95f1901ce8d0847feab4a20006b4c7bafbe02709b738f8b0426bab1b187af7ce279559c43245affff69269157b959c1d516fb2cd070dec1caf9c0dssdeep: 12288:+xuaVVcS2u69onDtycr4qe7BG9dEx2AUeYsSvEP:baVyS169on1e7BG9dk0ehSUtype: MS-DOS executable, MZ for MS-DOS

Version Info:

LegalCopyright: InternalName: FileVersion: 1.1.28.02ProductName: ProductVersion: 1.1.28.02FileDescription: OriginalFilename: Translation: 0x0409 0x04b0

HackTool:Win32/Aicat.A!ml also known as:

Bkav W32.AIDetect.malware1
K7AntiVirus Trojan ( 0052fa251 )
Lionic Trojan.Win32.AutoHK.l!c
DrWeb Trojan.DownLoader26.38463
Cynet Malicious (score: 100)
ALYac Gen:Variant.Strictor.162822
Cylance Unsafe
Sangfor Trojan.Win32.AutoHK.rn
CrowdStrike win/malicious_confidence_80% (W)
Alibaba TrojanSpy:Win32/AutoHK.a4e906ad
K7GW Trojan ( 0052fa251 )
Cybereason malicious.f5e63b
Symantec ML.Attribute.HighConfidence
ESET-NOD32 Win32/ClipBanker.FK
APEX Malicious
Avast Win32:Malware-gen
ClamAV Win.Dropper.Nanocore-7901131-0
Kaspersky Trojan-Spy.Win32.AutoHK.rn
BitDefender Gen:Variant.Strictor.162822
NANO-Antivirus Trojan.Win32.AutoHK.fazegw
MicroWorld-eScan Gen:Variant.Strictor.162822
Tencent Malware.Win32.Gencirc.114d019c
Ad-Aware Gen:Variant.Strictor.162822
Sophos Mal/Generic-S
Comodo Malware@#pfqcxpa1le2g
VIPRE Trojan.Win32.Generic!BT
McAfee-GW-Edition BehavesLike.Win32.Generic.hc
FireEye Generic.mg.2d51bd4f5e63bda1
Emsisoft Gen:Variant.Strictor.162822 (B)
SentinelOne Static AI – Suspicious PE
Avira TR/ClipBanker.ygcuy
Antiy-AVL Trojan/Generic.ASMalwS.25DD58E
Microsoft HackTool:Win32/Aicat.A!ml
ZoneAlarm HEUR:Trojan.Win32.Generic
GData Gen:Variant.Strictor.162822
TACHYON Trojan-Spy/W32.AutoHK.522752
AhnLab-V3 Trojan/Win32.Downloader.C2464017
McAfee Artemis!2D51BD4F5E63
MAX malware (ai score=100)
VBA32 Trojan.Downloader
Malwarebytes Malware.AI.1449070499
Panda Trj/CI.A
Yandex TrojanSpy.AutoHK!wzLk11eSiw0
Ikarus Trojan.Win32.Clipbanker
MaxSecure Trojan.Malware.300983.susgen
Fortinet W32/ClipBanker.FK!tr
AVG Win32:Malware-gen
Paloalto generic.ml
Qihoo-360 Win32/TrojanSpy.ClipBanker.HxIBEpsA

How to remove HackTool:Win32/Aicat.A!ml?

  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.
Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Recent Posts

Barys.438451 malicious file

The Barys.438451 is considered dangerous by lots of security experts. When this infection is active,…

5 mins ago

How to remove “Trojan.Generic.35785663”?

The Trojan.Generic.35785663 is considered dangerous by lots of security experts. When this infection is active,…

5 mins ago

Virus:Win32/Memery.HNS!MTB removal tips

The Virus:Win32/Memery.HNS!MTB is considered dangerous by lots of security experts. When this infection is active,…

31 mins ago

Trojan:MSIL/DCRat.RDJ!MTB (file analysis)

The Trojan:MSIL/DCRat.RDJ!MTB is considered dangerous by lots of security experts. When this infection is active,…

31 mins ago

How to remove “Virus:Win32/Expiro.L”?

The Virus:Win32/Expiro.L is considered dangerous by lots of security experts. When this infection is active,…

56 mins ago

Trojan:MSIL/Formbook.AMBA!MTB removal instruction

The Trojan:MSIL/Formbook.AMBA!MTB is considered dangerous by lots of security experts. When this infection is active,…

1 hour ago