Malware

Malware.AI.1881615330 information

Malware Removal

The Malware.AI.1881615330 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.1881615330 virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Yara rule detections observed from a process memory dump/dropped files/CAPE
  • Creates RWX memory
  • Possible date expiration check, exits too soon after checking local time
  • Dynamic (imported) function loading detected
  • Reads data out of its own binary image
  • A process created a hidden window
  • CAPE extracted potentially suspicious content
  • Authenticode signature is invalid
  • Behavioural detection: Injection (inter-process)
  • Created a process from a suspicious location
  • CAPE detected the Formbook malware family

How to determine Malware.AI.1881615330?


File Info:

name: CBEA4CF442E07BB6AA12.mlw
path: /opt/CAPEv2/storage/binaries/cf9565db0c7e242dafc592fd88893bf46a3201a17372675fef4cfcbd558d1c5b
crc32: B7562F58
md5: cbea4cf442e07bb6aa122f1b8eddef4d
sha1: d741e5ed6ea3c6d0fb068423a9637e5efa384142
sha256: cf9565db0c7e242dafc592fd88893bf46a3201a17372675fef4cfcbd558d1c5b
sha512: 90258c71eb5cc4379c7438f31136d0a2af5e44ad7fbb88c08df1de7cb6d3f954711bad0a18cbb144bd5d70ae7827c25888ce240f54af93d9ff049e725d253248
ssdeep: 12288:VSzmwxmwfYOxjTX4tFrM/lxZvrw9bd1kgc:+mwxwO6NulxZc5d1kj
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1DCB4124D3BA8D817C1A14A76C861E339E3755D8C3D169707ABF4BE2F7A363842E052D2
sha3_384: 68bb817ca4f8dbd5b024495de22c6de524c6db23dff3d30f4ae709e8f000473cffafb9cf6fc473c51b6a9e2d6771416f
ep_bytes: 81ec840100005355565733db68018000
timestamp: 2016-04-02 03:20:05

Version Info:

0: [No Data]

Malware.AI.1881615330 also known as:

LionicTrojan.Win32.Noon.l!c
Elasticmalicious (high confidence)
MicroWorld-eScanTrojan.GenericKD.37832897
CAT-QuickHealTrojan.GenericPMF.S24011797
ALYacTrojan.GenericKD.37832897
CylanceUnsafe
ZillyaTrojan.Noon.Win32.21454
SangforTrojan.Win32.RATX.gen
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaTrojanSpy:Win32/SpyNoon.e4b8dff5
K7GWTrojan ( 005893591 )
K7AntiVirusTrojan ( 005893591 )
CyrenW32/Injector.AMS.gen!Eldorado
SymantecTrojan Horse
ESET-NOD32a variant of Win32/Injector.EQIQ
APEXMalicious
Paloaltogeneric.ml
KasperskyHEUR:Trojan.Win32.Inject.pef
BitDefenderTrojan.GenericKD.37832897
AvastWin32:RATX-gen [Trj]
Ad-AwareTrojan.GenericKD.37832897
EmsisoftTrojan.GenericKD.37832897 (B)
ComodoMalware@#1brhzes7nghsv
DrWebTrojan.Siggen15.28405
TrendMicroTROJ_FRS.0NA103JL21
McAfee-GW-EditionRDN/Sabsik
FireEyeGeneric.mg.cbea4cf442e07bb6
SophosMal/Generic-S
IkarusTrojan.NSIS.Agent
GDataTrojan.GenericKD.37832897
AviraHEUR/AGEN.1145827
MAXmalware (ai score=83)
Antiy-AVLTrojan/Generic.ASMalwS.34BE118
KingsoftWin32.Troj.Undef.(kcloud)
ArcabitTrojan.Generic.D24148C1
MicrosoftTrojan:Win32/SpyNoon.SM!MTB
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win.Generic.C4714189
McAfeeRDN/Sabsik
VBA32TrojanSpy.Noon
MalwarebytesMalware.AI.1881615330
TrendMicro-HouseCallTROJ_FRS.0NA103JL21
RisingTrojan.Injector!8.C4 (CLOUD)
YandexTrojan.Injector!Z946fOX6rWM
SentinelOneStatic AI – Suspicious PE
FortinetW32/Injector_AGen.AW!tr
BitDefenderThetaGen:NN.ZedlaF.34182.cq4@aKUBFsoi
AVGWin32:RATX-gen [Trj]
Cybereasonmalicious.442e07
PandaTrj/CI.A

How to remove Malware.AI.1881615330?

Malware.AI.1881615330 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment