About “Mal/Allaple-C” infection

The Mal/Allaple-C is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Mal/Allaple-C virus can do?

The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine Mal/Allaple-C?


File Info:
name: 1E1E913DCF216BF304C2.mlw
path: /opt/CAPEv2/storage/binaries/dbc4af7b24fc9eebed1b8692e4254a42ede09faf9f585ae662cbbbde40deff00
crc32: 6CD69A32
md5: 1e1e913dcf216bf304c2581183e32f3c
sha1: 7cf48e37fc7e82a0ae5b54933c6243283e382b62
sha256: dbc4af7b24fc9eebed1b8692e4254a42ede09faf9f585ae662cbbbde40deff00
sha512: 6aac3959be6ab9be02f74081ebcd0a27bbfd89f66a292e3bd3647cfb85b1b43e72166ad2013fc4ce192ee8ab564bd42b7e5d432334c9d162f1c7629383b2fbaa
ssdeep: 768:Nd5MFVvZfv2cJZlTnLp7tgomCspGdXm0kBY9QBlo0oKI:Nde1fv2mZl7VyGdmlu6Bloo
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1835381CE9595CDC1FDCF383B0822A1FFA62A409D31E847C668741EDDE0A82105E9E35D
sha3_384: f340b325036a29cd51eb852965b0a41b8c401f1e07dd7b85b78c2cb675e64f6238d8d70057dd3bec1cf5d7d605859b04
ep_bytes: 8bc233d2b204015424c48bc28b5424c4
timestamp: 1989-11-16 20:39:27

Version Info:
0: [No Data]

Mal/Allaple-C also known as:

Bkav	W32.AIDetectMalware
Cynet	Malicious (score: 100)
CAT-QuickHeal	Trojan.Allaple.100113
McAfee	W32/RAHack
Cylance	unsafe
Zillya	Worm.Allaple.Win32.1
Sangfor	Suspicious.Win32.Save.a
K7AntiVirus	NetWorm ( f10000011 )
K7GW	NetWorm ( f10000011 )
CrowdStrike	win/malicious_confidence_100% (D)
Baidu	Win32.Trojan.Kryptik.gf
Cyren	W32/EmailWorm.HQK
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/Allaple.Gen
APEX	Malicious
ClamAV	Win.Worm.Allaple-5
Kaspersky	HEUR:Net-Worm.Win32.Allaple.gen
BitDefender	Gen:Variant.Lazy.186967
SUPERAntiSpyware	Worm.Allaple
MicroWorld-eScan	Gen:Variant.Lazy.186967
Avast	Win32:Allaple-ADR [Trj]
Tencent	Worm.Win32.Allple.ya
Emsisoft	Gen:Variant.Lazy.186967 (B)
F-Secure	Net-Worm:W32/Allaple.gen!B
DrWeb	Trojan.Packed2.44608
VIPRE	Gen:Variant.Lazy.186967
TrendMicro	WORM_ALLAPLE.IK
McAfee-GW-Edition	BehavesLike.Win32.RAHack.kz
Trapmine	malicious.high.ml.score
FireEye	Generic.mg.1e1e913dcf216bf3
Sophos	Mal/Allaple-C
SentinelOne	Static AI – Malicious PE
Avira	TR/Patched.Ren.Gen
Antiy-AVL	GrayWare/Win32.Allaple.gen
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
Xcitium	NetWorm.Win32.Allaple.GEN@1ei64a
Arcabit	Trojan.Lazy.D2DA57
ZoneAlarm	HEUR:Net-Worm.Win32.Allaple.gen
GData	Gen:Variant.Lazy.186967
AhnLab-V3	Win-Trojan/Starman.Gen
BitDefenderTheta	Gen:NN.ZexaF.36196.dmW@aG3mOdp
ALYac	Gen:Variant.Lazy.186967
MAX	malware (ai score=87)
Malwarebytes	Generic.Malware.AI.DDS
TrendMicro-HouseCall	WORM_ALLAPLE.IK
Rising	Worm.Allaple!1.AB29 (CLASSIC)
Ikarus	Net-Worm.Win32.Allaple.a
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Allaple.gen!tr
AVG	Win32:Allaple-ADR [Trj]
Cybereason	malicious.7fc7e8
DeepInstinct	MALICIOUS

How to remove Mal/Allaple-C?

Mal/Allaple-C removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X