Malware

Malware.AI.1705096398 malicious file

Malware Removal

The Malware.AI.1705096398 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.1705096398 virus can do?

  • Sample contains Overlay data
  • Performs HTTP requests potentially not found in PCAP.
  • Reads data out of its own binary image
  • Drops a binary and executes it
  • The binary contains an unknown PE section name indicative of packing
  • The executable is compressed using UPX
  • Authenticode signature is invalid
  • Attempts to repeatedly call a single API many times in order to delay analysis time
  • Attempts to modify proxy settings
  • Anomalous binary characteristics
  • Yara detections observed in process dumps, payloads or dropped files

How to determine Malware.AI.1705096398?


File Info:

name: 206706C53381692FCCD9.mlw
path: /opt/CAPEv2/storage/binaries/d88b385699c48d8633fe95e2eeb520fc1a655abc0ca3276dc9f5895049956c1c
crc32: 10770F3F
md5: 206706c53381692fccd904b97572fefa
sha1: fd988e9017e0c63c50c85aa943f606571ae1b0ba
sha256: d88b385699c48d8633fe95e2eeb520fc1a655abc0ca3276dc9f5895049956c1c
sha512: 9eed92a7b4ed2371d058e0722efff52f9f9668486d6bdecf49add54c872f88ffb07fb182ef5fc7bfaf1bbbc8b2236948ffa6ee233cfc8db74f4b748429e6e58b
ssdeep: 384:6/W8H8bZ5ukjw7e70GTTS/BiIxqcVWb8bZ5ukjwM4JRZl588BEY1J0jCyA5zM8:aW8A5uk8q0G3SsOAk5ukP4yW1J0X8
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T10BB38D1B2FC58D72D377073005A353BA9A95B82A26C1C6CDCF84F54ACD3FA82D41575A
sha3_384: db04fce482ab7a3c1abeab60a89fdf034cc8483678158762460d17b598b1a40e8455db8087e79df92b3fb304ff12197e
ep_bytes: 558bec83ec546a00ff1504304000ff15
timestamp: 2014-01-20 07:37:39

Version Info:

0: [No Data]

Malware.AI.1705096398 also known as:

BkavW32.AIDetectMalware
Elasticmalicious (moderate confidence)
DrWebTrojan.DownLoad3.28161
MicroWorld-eScanTrojan.Downloader.JQIK
FireEyeGeneric.mg.206706c53381692f
CAT-QuickHealTrojanpws.Zbot.28739
ALYacTrojan.Downloader.JQIK
MalwarebytesMalware.AI.1705096398
VIPRETrojan.Downloader.JQIK
SangforSuspicious.Win32.Save.a
K7AntiVirusTrojan ( 004bcce41 )
K7GWTrojan ( 004bcce41 )
BitDefenderThetaGen:NN.ZexaF.36804.gmX@auKLbGhi
SymantecML.Attribute.HighConfidence
ESET-NOD32Win32/TrojanDownloader.Waski.A
APEXMalicious
TrendMicro-HouseCallTROJ_UPATRE.SM37
ClamAVWin.Malware.Bublik-10004834-0
KasperskyHEUR:Trojan-Downloader.Win32.Upatre.gen
BitDefenderTrojan.Downloader.JQIK
NANO-AntivirusTrojan.Win32.Bublik.csrodh
AvastWin32:Agent-AUID [Trj]
RisingDownloader.Waski!8.184 (TFE:2:CKmSSFf1fpV)
EmsisoftTrojan.Downloader.JQIK (B)
GoogleDetected
BaiduWin32.Trojan-Downloader.Waski.a
ZillyaDownloader.Waski.Win32.91780
TrendMicroTROJ_UPATRE.SM37
Trapminesuspicious.low.ml.score
SophosTroj/Zbot-HPZ
SentinelOneStatic AI – Malicious PE
JiangminTrojanDownloader.Agent.emov
VaristW32/Waski.AC.gen!Eldorado
MAXmalware (ai score=83)
Antiy-AVLTrojan[Downloader]/Win32.Waski.a
Kingsoftmalware.kb.a.1000
XcitiumTrojWare.Win32.Yarwi.BV@56uh49
ArcabitTrojan.Downloader.JQIK
ZoneAlarmHEUR:Trojan-Downloader.Win32.Upatre.gen
GDataWin32.Trojan.PSE.ZTO4KH
CynetMalicious (score: 100)
AhnLab-V3Downloader/Win.UPX.C5609901
Acronissuspicious
VBA32Trojan.Bublik
Cylanceunsafe
PandaTrj/Downloader.WKR
ZonerTrojan.Win32.20901
TencentMalware.Win32.Gencirc.10bfd662
YandexTrojan.DL.Waski!MHk+mgH9L5c
IkarusTrojan-Downloader.Win32.Upatre
FortinetW32/Kryptik.BTEZ!tr
AVGWin32:Agent-AUID [Trj]
DeepInstinctMALICIOUS

How to remove Malware.AI.1705096398?

Malware.AI.1705096398 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment