Malware

Malware.AI.1984454398 malicious file

Malware Removal

The Malware.AI.1984454398 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.1984454398 virus can do?

  • SetUnhandledExceptionFilter detected (possible anti-debug)
  • Yara rule detections observed from a process memory dump/dropped files/CAPE
  • Creates RWX memory
  • Dynamic (imported) function loading detected
  • CAPE extracted potentially suspicious content
  • Authenticode signature is invalid
  • Network activity detected but not expressed in API logs

How to determine Malware.AI.1984454398?


File Info:

name: 1CD5775190E440BB2D52.mlw
path: /opt/CAPEv2/storage/binaries/4c6d5cc8b4237bfeec894e6b024475d67aa1fb3b7c4a2b5a832ead7ae86ef7f8
crc32: 71747F2C
md5: 1cd5775190e440bb2d52c232f665aa8d
sha1: c1202b73a08d8c2aa37c8bcf7a2735fa0c42f273
sha256: 4c6d5cc8b4237bfeec894e6b024475d67aa1fb3b7c4a2b5a832ead7ae86ef7f8
sha512: 1d05376c380f3a70530594ef3812f834aeac5e4c1b54fd65bf1fae4d0ab417407529feebe52d35071eff4e6ed36c7dc273885e0163c83a7945838640fb3664ed
ssdeep: 384:UV6UhAjxldCdK/st18ByxCW1fGrQxLl7Lce:UWHMK/s38IxCW1OQxZE
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1FF62E812BBEA8421FFF5097C24761EAB907F3A605F149DC327E019581535FC2E871E2A
sha3_384: 8d332804a69e46a32cf05b2584398c51f2dd5cfa34168624263ac09b9942343197ad87328fbe77a85c6def71201756d1
ep_bytes: e80b000000e916feffffcccccccccccc
timestamp: 2021-11-21 08:16:09

Version Info:

0: [No Data]

Malware.AI.1984454398 also known as:

LionicTrojan.Win32.Graftor.4!c
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.Graftor.786475
McAfeeArtemis!1CD5775190E4
CylanceUnsafe
CrowdStrikewin/malicious_confidence_80% (W)
CyrenW32/FakeAlert.FY.gen!Eldorado
TrendMicro-HouseCallTROJ_GEN.R002H09KL21
Paloaltogeneric.ml
BitDefenderGen:Variant.Graftor.786475
AvastFileRepMetagen [Malware]
Ad-AwareGen:Variant.Graftor.786475
EmsisoftGen:Variant.Graftor.786475 (B)
ComodoMalCrypt.Indus!@1qrzi1
McAfee-GW-EditionArtemis!Trojan
FireEyeGeneric.mg.1cd5775190e440bb
IkarusTrojan.Crypt
GDataGen:Variant.Graftor.786475
MaxSecureTrojan.Malware.300983.susgen
AviraTR/Crypt.XPACK.Gen
MicrosoftTrojan:Win32/Wacatac.B!ml
CynetMalicious (score: 100)
ALYacGen:Variant.Graftor.786475
MalwarebytesMalware.AI.1984454398
APEXMalicious
MAXmalware (ai score=84)
FortinetW32/PossibleThreat
AVGFileRepMetagen [Malware]
Cybereasonmalicious.190e44

How to remove Malware.AI.1984454398?

Malware.AI.1984454398 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment