Malware

How to remove “Malware.AI.1562860136”?

Malware Removal

The Malware.AI.1562860136 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.1562860136 virus can do?

  • SetUnhandledExceptionFilter detected (possible anti-debug)
  • Yara rule detections observed from a process memory dump/dropped files/CAPE
  • Anomalous file deletion behavior detected (10+)
  • Dynamic (imported) function loading detected
  • Reads data out of its own binary image
  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid
  • Created a process from a suspicious location
  • CAPE detected the PyInstaller malware family

How to determine Malware.AI.1562860136?


File Info:

name: D3447073DC956099543A.mlw
path: /opt/CAPEv2/storage/binaries/1cc954f6b756066bd4089e7066b3378ad2dec27811149415b99d8072a050c94d
crc32: 7DE32260
md5: d3447073dc956099543a6871529f1834
sha1: 3043e0478b107b5e5f2195ccaf40052b71f32489
sha256: 1cc954f6b756066bd4089e7066b3378ad2dec27811149415b99d8072a050c94d
sha512: 3fcc887e4488955f52e69a26742a223d816d990c90810f28a167d66167834409b567ba4b7ef587a2bf7c77aa7ca17002820c8bf84971691b1a8903d8fc4972dc
ssdeep: 196608:bINux7QICteEroXxWVfEqlbkkwR7VTEJDRNx78KQ:m8QInEroXgfEqirRRoJVNxgD
type: PE32+ executable (GUI) x86-64, for MS Windows
tlsh: T11666332D67A048E8F6F7423895F00C13D3B5BF2B4740D497592E71BE0AB3AEC6976A44
sha3_384: 6a1f3395c109626914351035b2ba5f60baf2fb8aea057d60bae77876369c6a259bb7df098143add59ba2232cbcf39b02
ep_bytes: 4883ec28e8f70400004883c428e97afe
timestamp: 2021-11-09 18:04:01

Version Info:

0: [No Data]

Malware.AI.1562860136 also known as:

CynetMalicious (score: 100)
McAfeeArtemis!D3447073DC95
AlibabaTrojanPSW:Win32/Almi_Disco.r
CyrenPYC/Disgrab.A.gen!Camelot
ESET-NOD32Python/PSW.Agent.GL
APEXMalicious
Paloaltogeneric.ml
KasperskyHEUR:Trojan-PSW.Python.Nuker.gen
BitDefenderGen:Variant.Tedy.4675
MicroWorld-eScanGen:Variant.Tedy.4675
Ad-AwareGen:Variant.Tedy.4675
EmsisoftGen:Variant.Tedy.4675 (B)
DrWebPython.Stealer.194
ZillyaTrojan.Agent.Script.1642387
McAfee-GW-EditionBehavesLike.Win64.PUPXBC.vc
FireEyeGen:Variant.Tedy.4675
SophosOSX/PWS-CLV
IkarusTrojan-Spy.Python.Disgrab
GDataGen:Variant.Tedy.4675
Antiy-AVLTrojan/Generic.ASMalwS.34CE23D
ArcabitTrojan.Tedy.D1243
MicrosoftTrojan:Win32/Sabsik.FL.B!ml
MAXmalware (ai score=82)
MalwarebytesMalware.AI.1562860136
TencentWin32.Trojan-psw.Agent.Wozc
SentinelOneStatic AI – Suspicious PE
FortinetPython/Agent.EX!tr
CrowdStrikewin/malicious_confidence_100% (W)

How to remove Malware.AI.1562860136?

Malware.AI.1562860136 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment