Malware

Malware.AI.1880935479 malicious file

Malware Removal

The Malware.AI.1880935479 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.1880935479 virus can do?

  • Performs HTTP requests potentially not found in PCAP.
  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid
  • Attempts to modify proxy settings

How to determine Malware.AI.1880935479?


File Info:

name: B338BAA673AC007D7AF5.mlw
path: /opt/CAPEv2/storage/binaries/ebb2bd669f02831e2572635d22623fa691d03782bcc237b9b502a7ff6a578661
crc32: 134F3D13
md5: b338baa673ac007d7af54075ea69660b
sha1: e7b9ac820e6a1ad963c37074135b115bb4c5f861
sha256: ebb2bd669f02831e2572635d22623fa691d03782bcc237b9b502a7ff6a578661
sha512: 2e49cf77f797ed25777a582c92a2bc40240277953309233c118e29cd62ebd189eb643723c639c26d075dea29f33a1085cf28076977fcbd42212e18fa392b92e1
ssdeep: 6144:mw47ZvVhkLVFKEbRRavn70AuDeqo5DTDYW6reULfqEzardXZ8LOAOzghTSioD:mN7ZvVkkEDaoLs5DTD9m/qoGdXZEOt3
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T174848D21B581D073C27302314F68E77995BEBA600B3556EB73E80ABD1EB41D1BA32767
sha3_384: c9292e3dd23112788c8abee4ad6028047c51ab9f7472e2c9a1335ad83b9ff3a1c76164863eebb822799b870aa8f44938
ep_bytes: e842090000e98efeffffff2550624400
timestamp: 2019-06-12 12:09:12

Version Info:

CompanyName: MS
FileDescription: System Manager
FileVersion: 1.0.0.1
InternalName: Client.exe
LegalCopyright: Copyright (C) 2019
OriginalFilename: System Manager.exe
ProductName: System Manager
ProductVersion: 1.0.0.1
Translation: 0x0409 0x04b0

Malware.AI.1880935479 also known as:

BkavW32.AIDetectMalware
LionicTrojan.Win32.APosT.4!c
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.Doina.42889
SkyhighBehavesLike.Win32.Generic.fh
ALYacTrojan.APosT.gen
Cylanceunsafe
ZillyaTrojan.Agent.Win32.1145372
SangforSpyware.Win32.APT34.ulxpg
K7AntiVirusRiskware ( 0040eff71 )
AlibabaTrojanDownloader:Win32/APosT.e2e423d9
K7GWRiskware ( 0040eff71 )
Cybereasonmalicious.20e6a1
BitDefenderThetaGen:NN.ZexaF.36680.yC0@a01waEpi
VirITTrojan.Win32.Agent.CTOO
SymantecTrojan Horse
ESET-NOD32a variant of Win32/TrojanDownloader.Agent.EQG
CynetMalicious (score: 100)
APEXMalicious
KasperskyTrojan.Win32.APosT.imx
BitDefenderGen:Variant.Doina.42889
NANO-AntivirusTrojan.Win32.APosT.ftmxgg
AvastWin32:Trojan-gen
TencentMalware.Win32.Gencirc.115d5f00
SophosMal/Generic-S
F-SecureTrojan.TR/Dldr.Agent.ibvne
VIPREGen:Variant.Doina.42889
TrendMicroTROJ_FRS.0NA103C320
EmsisoftGen:Variant.Doina.42889 (B)
SentinelOneStatic AI – Suspicious PE
JiangminTrojan.APosT.ow
WebrootW32.Malware.Gen
VaristW32/ABTrojan.CVXN-6439
AviraTR/Dldr.Agent.ibvne
Antiy-AVLTrojan[APT]/Win32.Apt34
Kingsoftmalware.kb.a.974
MicrosoftTrojan:Win32/Occamy.CEB
XcitiumMalware@#1uwfqpt88krfm
ArcabitTrojan.Doina.DA789
ViRobotTrojan.Win32.S.Agent.397824.AO
ZoneAlarmTrojan.Win32.APosT.imx
GDataGen:Variant.Doina.42889
GoogleDetected
AhnLab-V3Trojan/Win.APosT.R536469
McAfeeTrojan-APost.a
TACHYONTrojan/W32.TONEDEAF.397824
VBA32suspected of Trojan.Downloader.gen
MalwarebytesMalware.AI.1880935479
PandaTrj/GdSda.A
TrendMicro-HouseCallTROJ_FRS.0NA103C320
RisingTrojan.Generic@AI.88 (RDMK:3m0pxg04kV59NAlpT5dzMA)
YandexTrojan.GenAsa!eytTLXXkyVA
IkarusTrojan-Downloader.Win32.Agent
MaxSecureTrojan.Malware.74411438.susgen
FortinetW32/DwnLdr.YHJ!tr
AVGWin32:Trojan-gen
DeepInstinctMALICIOUS
CrowdStrikewin/malicious_confidence_100% (W)

How to remove Malware.AI.1880935479?

Malware.AI.1880935479 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment