Malware

Should I remove “Malware.AI.1712161553”?

Malware Removal

The Malware.AI.1712161553 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.1712161553 virus can do?

  • SetUnhandledExceptionFilter detected (possible anti-debug)
  • A process attempted to delay the analysis task.
  • Dynamic (imported) function loading detected
  • Authenticode signature is invalid
  • Uses Windows utilities for basic functionality
  • Detects Bochs through the presence of a registry key
  • Checks the version of Bios, possibly for anti-virtualization
  • Attempted to write directly to a physical drive
  • Attempts to modify proxy settings
  • Harvests cookies for information gathering
  • Collects information to fingerprint the system
  • Uses suspicious command line tools or Windows utilities

How to determine Malware.AI.1712161553?


File Info:

name: C5406E7E161C758E863E.mlw
path: /opt/CAPEv2/storage/binaries/aaacaff803623414b7ee1ee6130b08380722752d97d1659f67fe6763f208f315
crc32: 4BCA0F09
md5: c5406e7e161c758e863eb63001861bb1
sha1: 3c6a4db19321a10f563e5c2a018e3a72b243a276
sha256: aaacaff803623414b7ee1ee6130b08380722752d97d1659f67fe6763f208f315
sha512: 9ac6542354923590bd6a93139c9402954916d3f258476f8d9ea5f247d7b901f4981e70bf559abe6acd88f9aade69affc22c322b67653a1eaf5e9fe1ca7eafe14
ssdeep: 3072:ApKbkA5FTPXwJtxeGzJMPA7Eec4XUh3fDAkoUQ3:kA54tLnwNof3
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T171C38D11B5C1C4B2E4720935496EEA724E7DFA720F2059E7B394166E0EB40D1AE36FB3
sha3_384: 9412d17efc0fe86d55112d7f8ae87758d1b754ac06bee439c20581813b76d095beb8e5e32fec18fca765481cbdd389c4
ep_bytes: e866040000e978feffffcccccccccccc
timestamp: 2017-03-19 09:36:20

Version Info:

0: [No Data]

Malware.AI.1712161553 also known as:

BkavW32.AIDetect.malware2
LionicTrojan.Win32.IndigoZebra.4!c
Elasticmalicious (high confidence)
MicroWorld-eScanTrojan.GenericKD.50468860
FireEyeGeneric.mg.c5406e7e161c758e
ALYacBackdoor.Agent.BoxCaon
CylanceUnsafe
VIPRETrojan.GenericKD.50468860
SangforTrojan.Win32.IndigoZebra.gen
K7AntiVirusTrojan-Downloader ( 005208901 )
AlibabaTrojanDownloader:Win32/IndigoZebra.df2b1cdd
K7GWTrojan-Downloader ( 005208901 )
CrowdStrikewin/malicious_confidence_100% (W)
SymantecTrojan.Gen.2
ESET-NOD32a variant of Win32/TrojanDownloader.Speccom.M
APEXMalicious
Paloaltogeneric.ml
KasperskyHEUR:Trojan.Win32.IndigoZebra.gen
BitDefenderTrojan.GenericKD.50468860
NANO-AntivirusTrojan.Win32.IndigoZebra.ewaxso
AvastWin32:Malware-gen
Ad-AwareTrojan.GenericKD.50468860
EmsisoftTrojan.GenericKD.50468860 (B)
ComodoMalware@#369nol9q2ac88
ZillyaDownloader.Speccom.Win32.14
TrendMicroTROJ_GEN.R002C0PG121
McAfee-GW-EditionBehavesLike.Win32.Dropper.ch
SentinelOneStatic AI – Suspicious PE
GDataTrojan.GenericKD.50468860
JiangminTrojan.IndigoZebra.a
WebrootW32.Trojan.Gen
AviraTR/Dldr.Speccom.leoxi
MAXmalware (ai score=100)
KingsoftWin32.Troj.Undef.(kcloud)
ArcabitTrojan.Generic.D30217FC
ViRobotTrojan.Win32.Agent.122880.GA
MicrosoftTrojan:Win32/Skeeyah
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win32.IndigoZebra.C2299744
McAfeeGenericRXOX-EC!C5406E7E161C
VBA32BScope.Trojan.IndigoZebra
MalwarebytesMalware.AI.1712161553
TrendMicro-HouseCallTROJ_GEN.R002C0PG121
TencentWin32.Trojan.Indigozebra.Swua
IkarusTrojan-Downloader.Win32.Speccom
MaxSecureTrojan.Malware.119319637.susgen
FortinetW32/IndigoZebra!tr
BitDefenderThetaAI:Packer.E6F65DC01E
AVGWin32:Malware-gen
Cybereasonmalicious.e161c7
PandaTrj/GdSda.A

How to remove Malware.AI.1712161553?

Malware.AI.1712161553 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment