Malware

Should I remove “Malware.AI.1466079532”?

Malware Removal

The Malware.AI.1466079532 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.1466079532 virus can do?

  • SetUnhandledExceptionFilter detected (possible anti-debug)
  • Yara rule detections observed from a process memory dump/dropped files/CAPE
  • Possible date expiration check, exits too soon after checking local time
  • Dynamic (imported) function loading detected
  • A process created a hidden window
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Uses Windows utilities for basic functionality
  • Deletes its original binary from disk
  • Modifies boot configuration settings
  • Disables displaying Control Panel
  • Uses suspicious command line tools or Windows utilities
  • Suspicious wmic.exe use was detected

How to determine Malware.AI.1466079532?


File Info:

name: FFF48DEFBEA0323AAB67.mlw
path: /opt/CAPEv2/storage/binaries/b5f3b62255340f298d1647fae5f2e787fe2ef14f66cb079bb6018040167542f0
crc32: 1A2DF320
md5: fff48defbea0323aab670bf5a93771a6
sha1: 932e4865920c0bcac33a305ab67eba4ea1773651
sha256: b5f3b62255340f298d1647fae5f2e787fe2ef14f66cb079bb6018040167542f0
sha512: 83313d256ad5be8c6f77e5fe99098f032a1cca098f3419b891918254f7b7fd1d5ccd1e810487fea0657676439ad1d523d480b3dae0bb6dd2fbc8bbcfb188a07e
ssdeep: 98304:gxJBAUZLV566l2u45UNYFrkvz29kdJWmFg6RPN6qQSoeCGcI/qsMwx:gxJVr6w2u45UNSwvz1JWmFgyPNxvCGcO
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T19646D052E552813AD5B25030253EB776A05CAF311B309BCF739C3E989EB06D1AE7931B
sha3_384: b1e85248e6513a66288c517b1d04504eae24301dbab1f804ce1a8357c4843beac73e2a7d4a4d0a0831af2e529358b111
ep_bytes: e8bbd70100e8d3d5010033c0c3909090
timestamp: 2021-11-19 08:02:56

Version Info:

0: [No Data]

Malware.AI.1466079532 also known as:

BkavW32.AIDetect.malware2
FireEyeGeneric.mg.fff48defbea0323a
CylanceUnsafe
Sangfor[ARMADILLO V1.71]
Cybereasonmalicious.5920c0
SymantecML.Attribute.HighConfidence
Elasticmalicious (high confidence)
ESET-NOD32a variant of Win32/Packed.BlackMoon.A potentially unwanted
APEXMalicious
ClamAVWin.Dropper.Tiggre-9845940-0
NANO-AntivirusVirus.Win32.Gen.ccmw
DrWebTrojan.Rootkit.22093
McAfee-GW-EditionBehavesLike.Win32.Pykse.tc
SophosGeneric ML PUA (PUA)
SentinelOneStatic AI – Malicious PE
GDataWin32.Trojan.Agent.WP
MicrosoftTrojan:Win32/Sabsik.FL.B!ml
CynetMalicious (score: 100)
Acronissuspicious
McAfeeGenericRXHJ-YT!FFF48DEFBEA0
VBA32BScope.Trojan.Tnega
MalwarebytesMalware.AI.1466079532
RisingTrojan.Generic@AI.88 (RDMK:cmRtazqWt8HG/xeROkQGSHmEMllO)
FortinetW32/CoinMiner.BBYK!tr
BitDefenderThetaGen:NN.ZexaF.34638.@pW@aKa9e4j
CrowdStrikewin/malicious_confidence_70% (D)

How to remove Malware.AI.1466079532?

Malware.AI.1466079532 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment