Malware.AI.1562354431 malicious file

The Malware.AI.1562354431 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.1562354431 virus can do?

The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
CAPE detected the mimikatz malware family

How to determine Malware.AI.1562354431?


File Info:
name: 02DC224E3B1435A66508.mlw
path: /opt/CAPEv2/storage/binaries/778416b3298a3018a78e5036d26e0d3e416b8d6928c26ddb73b61f19d0aec4a2
crc32: D70CCC7E
md5: 02dc224e3b1435a6650866adf5e8eb36
sha1: bf9e299a19e8cf1588f1e4ea2ad242922b5a9c59
sha256: 778416b3298a3018a78e5036d26e0d3e416b8d6928c26ddb73b61f19d0aec4a2
sha512: a141958bdb3a81a2908417e57ea57ea8a144c4ddb669b284d83963647136a8cd1e9ea65abb154f39526fbb29d20274793912039889314419725fdf059216ba19
ssdeep: 196608:ylTPWmknGzwHdOgEPHd9BYX/nivPlTXTYP:afjz0E52/iv1
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T13C660222B65084B1D1CA017055FB5B37AAB976190B24F5CFB79CCD6A2F32390EE36319
sha3_384: c2bf613a64317d7ccdeb3cbcb6f69c3a3908a980f379a4e1cd7007e94882fea84e817838cd5f13c36835fcdf82f1b226
ep_bytes: 558bec6aff685057a4006814bf490064
timestamp: 2019-06-26 19:51:23

Version Info:
0: [No Data]

Malware.AI.1562354431 also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Zusy.372812
FireEye	Generic.mg.02dc224e3b1435a6
CAT-QuickHeal	Trojanpws.Qqpass.16543
ALYac	Gen:Variant.Zusy.372812
Malwarebytes	Malware.AI.1562354431
Sangfor	Miner.Win32.Zusy_495.se2
Cybereason	malicious.e3b143
BitDefenderTheta	Gen:NN.ZexaF.34182.@tZ@aipohZb
VirIT	Trojan.Win32.StartPage1.DICI
Cyren	W32/Backdoor.J.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/CoinMiner.BUJ
APEX	Malicious
ClamAV	Win.Dropper.Gh0stRAT-6989861-0
BitDefender	Gen:Variant.Zusy.372812
NANO-Antivirus	Trojan.Win32.EquationDrug.gaeevv
Sophos	ML/PE-A + Troj/Agent-BBZA
Comodo	TrojWare.Win32.CoinMiner.VA@8bdt5z
DrWeb	Trojan.StartPage1.58196
Emsisoft	Gen:Variant.Zusy.372812 (B)
Ikarus	Trojan-PSW.QQpass
Jiangmin	Exploit.MS17-010.cf
Antiy-AVL	Trojan/Win32.FlyStudio.a
ZoneAlarm	HEUR:Trojan.Win32.EquationDrug.gen
GData	Win32.Trojan.PSE.5LSHNI
Cynet	Malicious (score: 100)
VBA32	Trojan.Reconyc
MAX	malware (ai score=84)
Rising	Downloader.Agent!1.B837 (CLASSIC)
SentinelOne	Static AI – Malicious PE
Fortinet	W32/CoinMiner.65CA!tr
CrowdStrike	win/malicious_confidence_90% (W)

How to remove Malware.AI.1562354431?

Malware.AI.1562354431 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X