Categories: Malware

Malware.AI.1649200958 (file analysis)

The Malware.AI.1649200958 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Malware.AI.1649200958 virus can do?

Sample contains Overlay data
Yara rule detections observed from a process memory dump/dropped files/CAPE
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
Authenticode signature is invalid

How to determine Malware.AI.1649200958?


File Info:
name: 6487ABA29185D680850B.mlwpath: /opt/CAPEv2/storage/binaries/ff482efa554a2575568ca3729787014c57d59a1680bffab5d4917e168264768fcrc32: 89C1E1BCmd5: 6487aba29185d680850b683200ac68f8sha1: ca16f2a3aac7176c85e6c81a702994f171bcd9acsha256: ff482efa554a2575568ca3729787014c57d59a1680bffab5d4917e168264768fsha512: dd822335a7da9129b8b95a3902e0841f44a87d68d120e86cf23b5e8ac83f43e6f95999de471c1f2975ce3acc7eaa76342f3d8379635086f0e4c2c86cff709edessdeep: 24576:BjtC6RxD1hMbipXcvvX8wirRtcuO2hl5GdYquD+oHlG4Xt4JgPJCj8zDVpJEn:BjtxttI2vquflG4XtggPJMjntype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T17745AE23F18280F2C728113118FB1735FEB897565A70CA9BE7D4DE781D63251AB6B21Esha3_384: eee598d350563fd48134014c015013d863116801db7176469df60203c86d104984aae1d7da89863b3a13c27da4c06675ep_bytes: 558bec6aff68c0cd500068948b4b0064timestamp: 2022-07-26 12:39:36
Version Info:
FileVersion: 1.0.0.0FileDescription: Windows 配置程序ProductName: Windows TMProductVersion: 1.0.0.0LegalCopyright: 作者版权所有 请尊重并使用正版Comments: 本程序使用易语言编写(http://www.eyuyan.com)Translation: 0x0804 0x04b0

Malware.AI.1649200958 also known as:

Bkav	W32.AIDetect.malware1
tehtris	Generic.Malware
DrWeb	Trojan.MulDrop20.45437
MicroWorld-eScan	Gen:Variant.Zusy.392985
FireEye	Generic.mg.6487aba29185d680
CAT-QuickHeal	Risktool.Flystudio.16882
Cylance	Unsafe
Zillya	Trojan.Flyagent.Win32.756
Sangfor	Suspicious.Win32.Save.ins
K7AntiVirus	Trojan ( 005246d51 )
K7GW	Trojan ( 005246d51 )
Cybereason	malicious.29185d
BitDefenderTheta	Gen:NN.ZexaF.34606.or2@a4eYetib
Cyren	W32/OnlineGames.HI.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/Flyagent.NGX
APEX	Malicious
ClamAV	Win.Malware.FlyAgent-9850229-1
Kaspersky	UDS:Trojan.Win32.Agent
BitDefender	Gen:Variant.Zusy.392985
NANO-Antivirus	Trojan.Win32.Flyagent.jrdoip
Avast	Win32:TrojanX-gen [Trj]
Tencent	Trojan.Win32.Flyagent.16000183
Ad-Aware	Gen:Variant.Zusy.392985
Emsisoft	Gen:Variant.Zusy.392985 (B)
Comodo	TrojWare.Win32.Agent.OSCF@5rs7jr
VIPRE	Gen:Variant.Zusy.392985
McAfee-GW-Edition	BehavesLike.Win32.Generic.th
Trapmine	malicious.high.ml.score
Sophos	Generic ML PUA (PUA)
SentinelOne	Static AI – Malicious PE
GData	Win32.Trojan.Flyagent.A
Jiangmin	Trojan.Fsysna.nqb
Google	Detected
Avira	BDS/Agent.vfmhd
MAX	malware (ai score=81)
Antiy-AVL	Trojan/Generic.ASCommon.FA
Microsoft	Trojan:Win32/Wacatac.B!ml
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win32.BHO.C23372
VBA32	BScope.Trojan.Dynamer
ALYac	Gen:Variant.Zusy.392985
TACHYON	Trojan/W32.Agent.1279192
Malwarebytes	Malware.AI.1649200958
Rising	Spyware.Keylogger!1.65B5 (CLASSIC)
Yandex	Trojan.GenAsa!UMACS2Wk+V8
Ikarus	Trojan-PSW.QQpass
MaxSecure	Dropper.Dinwod.frindll
Fortinet	W32/Flyagent.NGX!tr
AVG	Win32:TrojanX-gen [Trj]
Panda	Trj/Genetic.gen
CrowdStrike	win/malicious_confidence_100% (W)