Malware

Malware.AI.1381334038 removal

Malware Removal

The Malware.AI.1381334038 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.1381334038 virus can do?

  • Sample contains Overlay data
  • Reads data out of its own binary image
  • CAPE extracted potentially suspicious content
  • Drops a binary and executes it
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • Authenticode signature is invalid
  • Uses Windows utilities for basic functionality
  • Deletes executed files from disk
  • Harvests cookies for information gathering
  • Uses suspicious command line tools or Windows utilities
  • Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Malware.AI.1381334038?


File Info:

name: 8E37FE5D7AAFC1138023.mlw
path: /opt/CAPEv2/storage/binaries/cc738af84e366828e66b601c814e789455d4d0e945c9dee3f96ef091ce9be087
crc32: C559D601
md5: 8e37fe5d7aafc1138023e626102a2c05
sha1: 48129e62df0643003e925c5e9e367c29aedb2be1
sha256: cc738af84e366828e66b601c814e789455d4d0e945c9dee3f96ef091ce9be087
sha512: 25bc11257efba92c42362f3f6e19e41bf19081b664dfb3d9397503212338bb8084e3298d5daf9a63ccd8bf5eafaa850c2ff70aef377871d43b45f531c28e8ad3
ssdeep: 24576:7n9p6L0NzL5SZkA9pGqWkEYYS9Krb+nf8zMThRDey8h/SD5lJZ3mYuznA:7nH6LoL5zA3GqWknn9KnSf8Uhd8/GlJ1
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T14C5533D038BA2961D6C6DD343251FCF3A19554620BEA3A320E9BC9E9D577EC690C320F
sha3_384: ccabcb337bb4d0ce742917d940c14dac807185332e931ea28675d6370c9f554c50641ad6b7c5d72eca80e16110c6cb97
ep_bytes: 60be00f047008dbe0020f8ff57eb0b90
timestamp: 2023-06-06 00:50:06

Version Info:

0: [No Data]

Malware.AI.1381334038 also known as:

BkavW32.AIDetectMalware
LionicTrojan.Win32.Convagent.4!c
Elasticmalicious (moderate confidence)
MicroWorld-eScanGen:Variant.Graftor.870617
FireEyeGeneric.mg.8e37fe5d7aafc113
McAfeeArtemis!8E37FE5D7AAF
Cylanceunsafe
ZillyaDownloader.Convagent.Win32.1450
SangforVirus.Win32.Save.a
K7AntiVirusTrojan ( 005246d51 )
AlibabaTrojanPSW:Win32/Disabler.3afd5fd1
K7GWTrojan ( 005246d51 )
CrowdStrikewin/grayware_confidence_60% (D)
BitDefenderThetaGen:NN.ZexaF.36250.onHfaiviofiH
SymantecML.Attribute.HighConfidence
tehtrisGeneric.Malware
ESET-NOD32a variant of Win32/Packed.FlyStudio.AA potentially unwanted
APEXMalicious
ClamAVWin.Dropper.Tiggre-9845940-0
KasperskyTrojan.Win32.Blamon.acqz
BitDefenderGen:Variant.Graftor.870617
NANO-AntivirusTrojan.Win32.Blamon.jwcrlp
AvastWin32:Dh-A [Heur]
TencentMalware.Win32.Gencirc.13b91950
SophosMal/Generic-S
F-SecureHeuristic.HEUR/AGEN.1355366
DrWebTrojan.PWS.Wsgame.56870
VIPREGen:Variant.Graftor.870617
TrendMicroTROJ_GEN.R002C0WFA23
McAfee-GW-EditionBehavesLike.Win32.Generic.tc
Trapminemalicious.high.ml.score
EmsisoftGen:Variant.Graftor.870617 (B)
SentinelOneStatic AI – Malicious PE
GDataWin32.Application.PSE.18M7LFX
JiangminTrojan.Blamon.bad
GoogleDetected
AviraHEUR/AGEN.1355366
Antiy-AVLTrojan/Win32.FlyStudio.a
ArcabitTrojan.Graftor.DD48D9
ZoneAlarmTrojan.Win32.Blamon.acqz
MicrosoftTrojan:Win32/Wacatac.A!ml
CynetMalicious (score: 100)
Acronissuspicious
VBA32BScope.Trojan.Tiggre
ALYacGen:Variant.Graftor.870617
MAXmalware (ai score=80)
MalwarebytesMalware.AI.1381334038
TrendMicro-HouseCallTROJ_GEN.R002C0WFA23
RisingTrojan.Blamon!8.E8FB (CLOUD)
IkarusTrojan.Win32.Disabler
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/FlyStudio.PHP!tr
AVGWin32:Dh-A [Heur]
Cybereasonmalicious.d7aafc
DeepInstinctMALICIOUS

How to remove Malware.AI.1381334038?

Malware.AI.1381334038 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment