About “Malware.AI.161823678” infection

The Malware.AI.161823678 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Malware.AI.161823678 virus can do?

• SetUnhandledExceptionFilter detected (possible anti-debug)
• Dynamic (imported) function loading detected
• Yara rule detections observed from a process memory dump/dropped files/CAPE
• Possible date expiration check, exits too soon after checking local time
• Enumerates the modules from a process (may be used to locate base addresses in process injection)
• CAPE extracted potentially suspicious content
• The binary likely contains encrypted or compressed data.
• Authenticode signature is invalid
• CAPE detected the RedLine malware family
• Anomalous binary characteristics

How to determine Malware.AI.161823678?

File Info:
name: 60E23E2476FB0F07A130.mlw
path: /opt/CAPEv2/storage/binaries/a618fdbcb7ca7474b886ebef665b505d31dce4964ad6eaea3d7ba43503c7d67b
crc32: 8AFEF8A8
md5: 60e23e2476fb0f07a130fb49bb115b06
sha1: b6daeed49d343369ed3e7e2ab152b5c4b47fb0b7
sha256: a618fdbcb7ca7474b886ebef665b505d31dce4964ad6eaea3d7ba43503c7d67b
sha512: c651b694d215a2758325b47b5c3f7c699577f2b0cf89407dd6a17377ca5213b98815d770013be2b72b06c3e230767739d639653cdfed306fd3f7a815e21e2a9a
ssdeep: 6144:QDKW1Lgbdl0TBBvjc/ix4O1yGCO/gAT/wFdX:2h1Lk70TnvjcKx45GCO/3TsdX
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T12744DF2175D1C1F2C5B6007048E6EB769A3A3072076A9AD7BEDD17BA6F213D1A3321CD
sha3_384: 6fc3455431b7ef631b3a5fff910f8333a43f92bdb7e3671a120a36be319eef8e40a6ebc68bf9b97c99b90fed4d1e95aa
ep_bytes: e8e15c0000e9a4feffff8bff558bec83
timestamp: 2012-07-13 22:47:16

Version Info:
Translation: 0x0000 0x04b0
Comments: 
CompanyName: 
FileDescription: 
FileVersion: 1.0.7.0
InternalName: Client.exe
LegalCopyright: 
LegalTrademarks: 
OriginalFilename: Client.exe
ProductName: 
ProductVersion: 1.0.7.0
Assembly Version: 1.0.7.0

Malware.AI.161823678 also known as:

How to remove Malware.AI.161823678?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.