Malware

About “Malware.AI.1449487415” infection

Malware Removal

The Malware.AI.1449487415 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.1449487415 virus can do?

  • SetUnhandledExceptionFilter detected (possible anti-debug)
  • Dynamic (imported) function loading detected
  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid
  • Uses Windows utilities for basic functionality
  • Attempts to repeatedly call a single API many times in order to delay analysis time
  • Deletes executed files from disk

How to determine Malware.AI.1449487415?


File Info:

name: 8E39AB27BB6A73286ED2.mlw
path: /opt/CAPEv2/storage/binaries/c7348de171d5128988951e2e2401ff7781681954a070f13585c818a6a3831b05
crc32: 6C80DA69
md5: 8e39ab27bb6a73286ed27c3cdfb2c537
sha1: 2b692700bc0755927cc759cc0fe99fcfc79405f1
sha256: c7348de171d5128988951e2e2401ff7781681954a070f13585c818a6a3831b05
sha512: 58c45ae88ac33edb67b8e35c8a2782dde3c135efbc712fa7a9d829332c9977c2c56715faf3e23fea7f4546fcff5a94dfbc647d742e41af9c3c18b72e54c7ff13
ssdeep: 1536:H7fbN3eEDhDPA/pICdUkbBtW7upvaLU0bI5taxKo0IOlnToIfNwI8:b7DhdC6kzWypvaQ0FxyNTBfN98
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T1C3937D41F3E102F7EAF2053100A6722F973666389724E9DBC74C2E529913AD1A63D3F9
sha3_384: 959b591291b491deccb88342e1c5f1c8bcd02ca3912e1987502abfc897e9a37fc25af5a0d72ed86c26961fb7f82a81c1
ep_bytes: 68ac00000068000000006868804100e8
timestamp: 2019-07-30 08:52:45

Version Info:

FileVersion: 1.1.0.2
ProductVersion: 1.0
ProductName: DDOsER
OriginalFilename: DDOSER by KARELDEV
InternalName: DDoSER
Translation: 0x0000 0x04e4

Malware.AI.1449487415 also known as:

BkavW32.AIDetect.malware2
LionicTrojan.Win32.Encoder.trrL
CAT-QuickHealTrojan.GenericPMF.S15065801
McAfeeArtemis!8E39AB27BB6A
CylanceUnsafe
SangforTrojan.Win32.Save.a
K7AntiVirusTrojan ( 0052419b1 )
AlibabaTrojan:Win32/Occamy.d581ae42
K7GWTrojan ( 0052419b1 )
Cybereasonmalicious.0bc075
CyrenW32/Trojan.PGIM-5197
SymantecML.Attribute.HighConfidence
Elasticmalicious (high confidence)
ESET-NOD32BAT/HackTool.DoSer.L
Paloaltogeneric.ml
TrendMicroTROJ_GEN.R002C0DG721
McAfee-GW-EditionBehavesLike.Win32.Generic.nh
FireEyeGeneric.mg.8e39ab27bb6a7328
SophosMal/Generic-R
IkarusTrojan.PowerShell.Crypt
WebrootW32.Trojan.GenKD
Antiy-AVLTrojan/Win32.Occamy
MicrosoftTrojan:Win32/Occamy.CC7
GDataWin32.Trojan.PSE.1LCASZL
CynetMalicious (score: 100)
MalwarebytesMalware.AI.1449487415
TrendMicro-HouseCallTROJ_GEN.R002C0DG721
RisingTrojan.Generic@AI.98 (RDMK:Bu6K0Q9mS1udHeCqGcwnWg)
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.82435067.susgen
FortinetW32/PossibleThreat
BitDefenderThetaGen:NN.ZexaF.34806.fu0@aqlCCVg
PandaPUP/Hacktool
CrowdStrikewin/grayware_confidence_100% (W)

How to remove Malware.AI.1449487415?

Malware.AI.1449487415 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment