Malware

How to remove “Malware.AI.1596070176”?

Malware Removal

The Malware.AI.1596070176 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.1596070176 virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Yara rule detections observed from a process memory dump/dropped files/CAPE
  • Presents an Authenticode digital signature
  • Creates RWX memory
  • Possible date expiration check, exits too soon after checking local time
  • Dynamic (imported) function loading detected
  • Reads data out of its own binary image
  • CAPE extracted potentially suspicious content
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Anomalous binary characteristics

How to determine Malware.AI.1596070176?


File Info:

name: EC537B0A7E308AC9F1F5.mlw
path: /opt/CAPEv2/storage/binaries/059081d94c0875f8f580018eb4560dc1ffb7c9ab2baae264d8830a88cdd356ac
crc32: 76C95425
md5: ec537b0a7e308ac9f1f5c7b25ada4670
sha1: d5c2a328ce2313042bdc3bd2f6f7a057b8cd59a7
sha256: 059081d94c0875f8f580018eb4560dc1ffb7c9ab2baae264d8830a88cdd356ac
sha512: 84f861b7566386fb39c4a9bb59fd202d10e953cc5e130a11edcc9936495af51e09444b448c38063496244feb4a22c76c4af0a8b984b72dd45d228906b7966205
ssdeep: 6144:vncbNtgQ4sMe5ThOOR8mdY7mwcU3QFpThnOVOnNtWk6oqPwZ9qlZJOf3yNJz:vCN6Q44xdY7mwchFpTwVESk6oq+9qlZL
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T19384E015C81854B3D86EA2F15B3E22A2C421EFF45BD318175BD80E0F3A75AEE0619DDB
sha3_384: b2c017595bebf4bb77221285fc8ef9a2de7c2ca0fbeb06f25a5c4b4110b81e9c5f8f939708adef35e405b5b33db745a0
ep_bytes: 558bec83ec7c535657c745d880a94500
timestamp: 2012-11-02 18:00:30

Version Info:

0: [No Data]

Malware.AI.1596070176 also known as:

BkavW32.AIDetect.malware2
LionicTrojan.Win32.Zbot.lDMg
Elasticmalicious (high confidence)
CynetMalicious (score: 100)
FireEyeGeneric.mg.ec537b0a7e308ac9
CAT-QuickHealTrojanPWS.Zbot.Gen
ALYacGen:Variant.Symmi.7095
CylanceUnsafe
VIPRETrojan.Win32.Cleaman.aj (v)
SangforTrojan.Win32.Zbot.GO
CrowdStrikewin/malicious_confidence_90% (W)
AlibabaTrojanPSW:Win32/Fareit.223ae866
K7GWTrojan ( 0040f1aa1 )
K7AntiVirusTrojan ( 0040f1aa1 )
BaiduWin32.Trojan.Kryptik.et
VirITTrojan.Win32.Generic.AHGA
CyrenW32/Zbot.FL.gen!Eldorado
SymantecPacked.Generic.459
ESET-NOD32Win32/Spy.Zbot.AAN
APEXMalicious
Paloaltogeneric.ml
ClamAVWin.Packed.Zbot-9771574-0
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderGen:Variant.Symmi.7095
NANO-AntivirusTrojan.Win32.Zbot.bburnq
ViRobotTrojan.Win32.A.Zbot.381200
MicroWorld-eScanGen:Variant.Symmi.7095
AvastWin32:Agent-AQKJ [Trj]
TencentMalware.Win32.Gencirc.10ba97a3
Ad-AwareGen:Variant.Symmi.7095
ComodoTrojWare.Win32.Kryptik.SES@4s5v9d
DrWebTrojan.Inject1.12855
ZillyaTrojan.Spy.Win32.1969
TrendMicroTROJ_SIGEKAF.SM
EmsisoftGen:Variant.Symmi.7095 (B)
SentinelOneStatic AI – Malicious PE
GDataGen:Variant.Symmi.7095
JiangminTrojanSpy.Zbot.ciyl
WebrootW32.InfoStealer.Zeus
AviraTR/Crypt.ZPACK.Gen8
Antiy-AVLTrojan/Generic.ASMalwS.12B90A
MicrosoftPWS:Win32/Zbot!GO
TACHYONTrojan-Spy/W32.ZBot.381200
AhnLab-V3Spyware/Win32.Zbot.R42277
Acronissuspicious
McAfeePWS-Zbot.gen.aln
MAXmalware (ai score=100)
VBA32BScope.Malware-Cryptor.SB.01798
MalwarebytesMalware.AI.1596070176
TrendMicro-HouseCallTROJ_SIGEKAF.SM
RisingSpyware.Zbot!8.16B (TFE:dGZlOgLMxfspXBjBsA)
IkarusTrojan.Signed
MaxSecureTrojan.Packed.Krap.iu
FortinetW32/Lockscreen.LOA!tr
BitDefenderThetaGen:NN.ZexaF.34212.xmX@aG3rLfi
AVGWin32:Agent-AQKJ [Trj]
Cybereasonmalicious.a7e308
PandaTrj/Genetic.gen

How to remove Malware.AI.1596070176?

Malware.AI.1596070176 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment