Malware

Malware.AI.1690649923 removal

Malware Removal

The Malware.AI.1690649923 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.1690649923 virus can do?

  • SetUnhandledExceptionFilter detected (possible anti-debug)
  • Attempts to connect to a dead IP:Port (1 unique times)
  • Creates RWX memory
  • Dynamic (imported) function loading detected
  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid

How to determine Malware.AI.1690649923?


File Info:

name: 9CC873B1A120BD74883A.mlw
path: /opt/CAPEv2/storage/binaries/f173a45bf0ea58061cfdfe91eb3e54890e6bb481e3afeb3a3a38e5702a427ad8
crc32: AA64FA0D
md5: 9cc873b1a120bd74883a20dab4b99907
sha1: f991367370c32e576dc18fea5f310bceeb7e60ff
sha256: f173a45bf0ea58061cfdfe91eb3e54890e6bb481e3afeb3a3a38e5702a427ad8
sha512: fa333041ded624649e39cdfda562ab3ca2e2ac27f82ad46d30913c9b35a8053ca3676b17fd94d6f834b7f7ff6f2e6c951f399d361e62c806b3ecc1138312d677
ssdeep: 49152:vjI7CalwybqMG7bYK8bbls0TyIBWgeDKNK65DAyIDUr4ZEkCa9l714YwIGjg+AqS:vjkayb5yIBcD0rAyIDUu5vBD+Aq
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T173265C50FDDB90F5E6074A3049A7A37F2730A2099338CBD7CA545E96F817BE1097326A
sha3_384: f9a679d2a3361d5539d7b7d13fa45abdc510e5628874de6e8525d594ad34826309e3d1e3565e9110eea98b2234c8bc55
ep_bytes: e9fbdaffffcccccccccccccccccccccc
timestamp: 1970-01-01 00:00:00

Version Info:

0: [No Data]

Malware.AI.1690649923 also known as:

LionicTrojan.Win32.Bulz.4!c
MicroWorld-eScanGen:Variant.Bulz.239520
FireEyeGen:Variant.Bulz.239520
McAfeeArtemis!9CC873B1A120
SangforSuspicious.Win32.Bulz.239520
AlibabaTrojan:Win32/Snojan.d4fdbce8
SymantecML.Attribute.HighConfidence
TrendMicro-HouseCallTROJ_GEN.R002H0CB622
BitDefenderGen:Variant.Bulz.239520
NANO-AntivirusTrojan.Win32.Snojan.iggvuh
AvastWin32:Malware-gen
Ad-AwareGen:Variant.Bulz.239520
McAfee-GW-EditionBehavesLike.Win32.Generic.rh
EmsisoftGen:Variant.Bulz.239520 (B)
IkarusTrojan.Snojan
GDataGen:Variant.Bulz.239520
AviraTR/Snojan.pabey
MAXmalware (ai score=87)
ArcabitTrojan.Bulz.D3A7A0
CynetMalicious (score: 99)
MalwarebytesMalware.AI.1690649923
APEXMalicious
RisingTrojan.Snojan!8.E387 (CLOUD)
FortinetW32/Snojan.CSRK!tr
AVGWin32:Malware-gen
Cybereasonmalicious.1a120b
PandaTrj/CI.A

How to remove Malware.AI.1690649923?

Malware.AI.1690649923 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment