Malware

What is “Malware.AI.1253429508”?

Malware Removal

The Malware.AI.1253429508 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.1253429508 virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • CAPE extracted potentially suspicious content
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Malware.AI.1253429508?


File Info:

name: ED151FCC8C639711BCEC.mlw
path: /opt/CAPEv2/storage/binaries/4cb12af48337c1b66da7e430fe0a77616a6b2d8a1645b00f42a8809f6bb19bfc
crc32: BA912F06
md5: ed151fcc8c639711bcec6dd145a0938a
sha1: 26d075014c3a1d9af6e295e006f78906442e48f3
sha256: 4cb12af48337c1b66da7e430fe0a77616a6b2d8a1645b00f42a8809f6bb19bfc
sha512: 71fc3ae4d0e42e54c1cf996414778aeac45b42ca19f68479571150356003d70110b48bf13cb9487fffad91437992fdf63766a824a4b6d9f8adafe6615ebd9a79
ssdeep: 49152:7P5Ciouav3tA8J4Yewo2V76JuyrqLQg1:Nw51J4YewoQ761
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T15A75F08DB204AF93C89096B1650B8EF3155B3BC60973224DA5906E5F133E2AE5F7EF11
sha3_384: 6fe5ca40aa21446c8b35b552c499c3a7393dbbd3c3fc90e4e79bfefb5c1971bba493602f0ce89934d1e039d76e2b379e
ep_bytes: b8a8b663005064ff3500000000648925
timestamp: 2012-01-19 08:40:35

Version Info:

0: [No Data]

Malware.AI.1253429508 also known as:

BkavW32.AIDetectMalware
LionicTrojan.Win32.Generic.4!c
tehtrisGeneric.Malware
FireEyeGeneric.mg.ed151fcc8c639711
SkyhighGenericRXWI-SN!A8A930EAA96B
MalwarebytesMalware.AI.1253429508
CrowdStrikewin/malicious_confidence_70% (W)
BitDefenderThetaGen:NN.ZexaF.36792.IjWaaa6Zccdj
Elasticmalicious (high confidence)
APEXMalicious
CynetMalicious (score: 100)
AvastWin32:TrojanX-gen [Trj]
Trapminemalicious.moderate.ml.score
SophosGeneric ML PUA (PUA)
SentinelOneStatic AI – Suspicious PE
Antiy-AVLTrojan/Win32.Agent
XcitiumMalware@#sjb4lsrj85yq
McAfeeArtemis!ED151FCC8C63
VBA32BScope.TrojanBanker.Banker
Cylanceunsafe
TrendMicro-HouseCallTROJ_GEN.R002H06JK23
YandexTrojan.GenAsa!UUi6NwV1NbQ
MaxSecureTrojan.Malware.300983.susgen
AVGWin32:TrojanX-gen [Trj]
Cybereasonmalicious.14c3a1
DeepInstinctMALICIOUS

How to remove Malware.AI.1253429508?

Malware.AI.1253429508 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment