Malware

Malware.AI.2055017293 information

Malware Removal

The Malware.AI.2055017293 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.2055017293 virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Performs HTTP requests potentially not found in PCAP.
  • Reads data out of its own binary image
  • CAPE extracted potentially suspicious content
  • Drops a binary and executes it
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Attempts to modify proxy settings
  • Deletes executed files from disk
  • Anomalous binary characteristics
  • Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Malware.AI.2055017293?


File Info:

name: 347E0F923F9C53AF2781.mlw
path: /opt/CAPEv2/storage/binaries/59107aec90ea274c8ed6d62d4b9c7d373c02656f13fd0d4d8d74789e917e2a86
crc32: B4EAB596
md5: 347e0f923f9c53af278141955c99d2a4
sha1: ed4dc4ff413e7d998c3a8d5255b80e0d51114a4c
sha256: 59107aec90ea274c8ed6d62d4b9c7d373c02656f13fd0d4d8d74789e917e2a86
sha512: 2bdcea4e5eddcc2f22a9fad1e63d7dc8c0ee10890956405ed9ee52d9336909b3fae09c468ca0a67b7967cb51786af87fcb4609088c21be308da6355dc3d94327
ssdeep: 12288:63JH4Ih3ZM+AlZWTYcYeS4EUp2v5tGc+UFu6:63l4Ih3DTYVbje25tGca
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T11CB4F1A6A500F772C6EACB36846757F8932F3D126EB133CB2064BE5116F32B1F512949
sha3_384: 7159031943616fe1f05370a627dfba813c8cfed44f38265e846b39586ef8bb5779ae3c3e107c18d250d745ce6782dc95
ep_bytes: 558bec81c4dcfaffff6affff153cf044
timestamp: 1970-03-25 22:30:03

Version Info:

0: [No Data]

Malware.AI.2055017293 also known as:

BkavW32.AIDetectMalware
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.FakeAlert.78
ClamAVWin.Trojan.Fakeav-42397
FireEyeGeneric.mg.347e0f923f9c53af
ALYacGen:Variant.FakeAlert.78
MalwarebytesMalware.AI.2055017293
ZillyaTrojan.FakeAV.Win32.95676
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (D)
BitDefenderThetaGen:NN.ZexaF.36196.FqW@aOYd7tdi
CyrenW32/FakeAlert.PH.gen!Eldorado
SymantecML.Attribute.HighConfidence
tehtrisGeneric.Malware
ESET-NOD32a variant of Win32/Kryptik.PLS
APEXMalicious
CynetMalicious (score: 100)
KasperskyHEUR:Trojan.Win32.Diple.vho
BitDefenderGen:Variant.FakeAlert.78
NANO-AntivirusTrojan.Win32.Fakealert.eimjch
SUPERAntiSpywareTrojan.Agent/Gen-FakeLoad
AvastWin32:Kryptik-DII [Trj]
TencentMalware.Win32.Gencirc.10be9340
TACHYONTrojan/W32.Agent.514048.AU
EmsisoftGen:Variant.FakeAlert.78 (B)
F-SecureTrojan.TR/Fraudpack.ttu.2
DrWebTrojan.Fakealert.21226
VIPREGen:Variant.FakeAlert.78
TrendMicroTROJ_FAKEAV.SMID
McAfee-GW-EditionBehavesLike.Win32.Generic.hc
Trapminemalicious.high.ml.score
SophosMal/FakeAV-IS
IkarusTrojan.Win32.FakeAV
GDataGen:Variant.FakeAlert.78
JiangminTrojan/Generic.ggzt
AviraTR/Fraudpack.ttu.2
Antiy-AVLTrojan/Win32.Unknown
XcitiumTrojWare.Win32.Kryptik.PLS@3nwro6
ArcabitTrojan.FakeAlert.78
ZoneAlarmHEUR:Trojan.Win32.Diple.vho
MicrosoftRogue:Win32/Winwebsec
GoogleDetected
AhnLab-V3Trojan/Win32.FakeAV.R7749
McAfeeGeneric FakeAV.oi
MAXmalware (ai score=82)
VBA32BScope.TrojanDownloader.Banload
Cylanceunsafe
PandaTrj/Cycbot.gen
TrendMicro-HouseCallTROJ_FAKEAV.SMID
RisingTrojan.Kryptik!8.8 (TFE:2:GJMM4A7TQ2B)
YandexTrojan.GenAsa!AUijycCEHmY
SentinelOneStatic AI – Malicious PE
FortinetW32/FakeAlert.AMB!tr
AVGWin32:Kryptik-DII [Trj]
Cybereasonmalicious.23f9c5
DeepInstinctMALICIOUS

How to remove Malware.AI.2055017293?

Malware.AI.2055017293 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment