What is “Malware.AI.1580402547”?

The Malware.AI.1580402547 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.1580402547 virus can do?

The binary contains an unknown PE section name indicative of packing
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Malware.AI.1580402547?


File Info:
name: 85156826BC83BBCE3075.mlw
path: /opt/CAPEv2/storage/binaries/1e12c47269d5447d00f807421f80b204e197c26e9a80e187183fa8a3f4406338
crc32: 4BF2B86F
md5: 85156826bc83bbce30750d7dab32a404
sha1: b17625ad7b331bf02c0140a4a3ed56cf7579e16a
sha256: 1e12c47269d5447d00f807421f80b204e197c26e9a80e187183fa8a3f4406338
sha512: 395c33fcd18696a95f13417d1942a23c0b0153a2cd403079759bc2edccabd4cf3654fc72011ab3059b999bf3192be0761fb3c69d5b5d11acae42a7099ad4c780
ssdeep: 384:SNThjTcVYesU/g+9+POsNZmbmlY7YDL8bhjoBLnJvn8OyKKLW9WbxW+Y:+hjTcU+9sPNDQrjo5ndn8OJy2
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T1BF82CFD2A2FD0D9AF39AEE3185BA873DD53D79150D36C28E85D0122D6D70008DA79BB2
sha3_384: dc4a41f5a8dbaa955a807cf5126a813cb1b2b3c1497bb6ab9824efd445a1f2205523f6cebde75b695b10f52617de5acc
ep_bytes: b800c04000608da80040ffff68620b82
timestamp: 2013-08-22 04:01:07

Version Info:
CompanyName: Microsoft Corporation
FileDescription: Kerberos Setup tool
FileVersion: 6.3.9600.16384 (winblue_rtm.130821-1623)
InternalName: ksetup.exe
LegalCopyright: © Microsoft Corporation. All rights reserved.
OriginalFilename: ksetup.exe
ProductName: Microsoft® Windows® Operating System
ProductVersion: 6.3.9600.16384
Translation: 0x0409 0x04b0

Malware.AI.1580402547 also known as:

Bkav	W32.Common.94552F4E
Lionic	Trojan.Win32.Generic.4!c
FireEye	Generic.mg.85156826bc83bbce
McAfee	Artemis!85156826BC83
Malwarebytes	Malware.AI.1580402547
Sangfor	Suspicious.Win32.Save.a
Elastic	malicious (high confidence)
APEX	Malicious
Avast	Win32:Evo-gen [Trj]
F-Secure	Trojan.TR/Crypt.XPACK.Gen
McAfee-GW-Edition	BehavesLike.Win32.Rootkit.lc
Trapmine	suspicious.low.ml.score
Ikarus	Trojan.Crypt
Google	Detected
Avira	TR/Crypt.XPACK.Gen
Antiy-AVL	Trojan/Win32.Zpevdo
Microsoft	Trojan:Win32/Wacatac.B!ml
Cynet	Malicious (score: 100)
AhnLab-V3	Malware/Win32.Generic.C2441101
BitDefenderTheta	Gen:NN.ZexaF.36722.bq0@aueWsWdi
Cylance	unsafe
Rising	Trojan.Generic@AI.100 (RDML:6hsIps5AB/6n8Wov6AXzCQ)
SentinelOne	Static AI – Suspicious PE
Fortinet	W32/PossibleThreat
AVG	Win32:Evo-gen [Trj]
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_100% (W)

How to remove Malware.AI.1580402547?

Malware.AI.1580402547 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X