Malware

Malware.AI.1154202818 removal guide

Malware Removal

The Malware.AI.1154202818 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.1154202818 virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • SetUnhandledExceptionFilter detected (possible anti-debug)
  • Yara rule detections observed from a process memory dump/dropped files/CAPE
  • Creates RWX memory
  • Possible date expiration check, exits too soon after checking local time
  • Dynamic (imported) function loading detected
  • CAPE extracted potentially suspicious content
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • The binary contains an unknown PE section name indicative of packing
  • Executable file is packed/obfuscated with ASPack
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid

How to determine Malware.AI.1154202818?


File Info:

name: 8E8A9A31936841EBA6DE.mlw
path: /opt/CAPEv2/storage/binaries/08ac2746094f45d334adf237164535b0c348704c1497feca2892b9284e76a064
crc32: 6730026D
md5: 8e8a9a31936841eba6deaba13ab41fab
sha1: dbfc82eb48b8755c903bc58a15158ca9ba7961fa
sha256: 08ac2746094f45d334adf237164535b0c348704c1497feca2892b9284e76a064
sha512: 7c13838ab781372ec1b549d4e70b1e215efda87960b07a0773846532bb8278d016744f218cba62bd9fe04a4132fff971080c3bf50935cc7772155ae4a1784c66
ssdeep: 98304:RGpt2YL/5kFu3HWoc+u6CirjnXdIyAkLC0nMPsgC:dekwdeyLXdIyzdM
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T12F0633633D9ACEDFDA89B3301900555A5D7E346D4E36A2F4B20BFE071E06AF118BA741
sha3_384: b2064b3052b856dca0a70d652c421263ef941c7e19e590b1635fa7883381c9da904391e68523b4d34429b714fea896d7
ep_bytes: 60e803000000e9eb045d4555c3e80100
timestamp: 2022-06-16 13:11:14

Version Info:

0: [No Data]

Malware.AI.1154202818 also known as:

Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.Jaik.81019
FireEyeGeneric.mg.8e8a9a31936841eb
McAfeeGenericRXAA-AA!8E8A9A319368
CylanceUnsafe
Cybereasonmalicious.b48b87
BitDefenderThetaGen:NN.ZexaF.34806.LBWbaSFajMaj
CyrenW32/S-b28b44ae!Eldorado
SymantecML.Attribute.HighConfidence
tehtrisGeneric.Malware
ClamAVWin.Malware.Jaik-9956538-0
BitDefenderGen:Variant.Jaik.81019
AvastWin32:Malware-gen
Ad-AwareGen:Variant.Jaik.81019
EmsisoftGen:Variant.Jaik.81019 (B)
VIPREGen:Variant.Jaik.81019
McAfee-GW-EditionGenericRXTO-XN!BA0393A0B18F
Trapminemalicious.high.ml.score
SophosGeneric ML PUA (PUA)
IkarusTrojan.Win32.CryptInject
GDataGen:Variant.Jaik.81019
Antiy-AVLTrojan/Generic.ASMalwS.592C
ArcabitTrojan.Jaik.D13C7B
MicrosoftTrojan:Win32/Sabsik.FL.B!ml
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win.Generic.R504453
VBA32BScope.TrojanDownloader.Agent
ALYacGen:Variant.Jaik.81019
MAXmalware (ai score=83)
MalwarebytesMalware.AI.1154202818
APEXMalicious
SentinelOneStatic AI – Suspicious PE
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Injector.NBUE!tr
AVGWin32:Malware-gen
PandaTrj/Genetic.gen
CrowdStrikewin/malicious_confidence_90% (W)

How to remove Malware.AI.1154202818?

Malware.AI.1154202818 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment