Malware

Malware.AI.214323910 malicious file

Malware Removal

The Malware.AI.214323910 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.214323910 virus can do?

  • Attempts to connect to a dead IP:Port (1 unique times)
  • Creates RWX memory
  • Possible date expiration check, exits too soon after checking local time
  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • Attempts to modify proxy settings

Related domains:

a.uguu.se

How to determine Malware.AI.214323910?


File Info:

crc32: 28BC2B4B
md5: 73db2b58503ec0b2b56c4f9fdff3fe40
name: 73DB2B58503EC0B2B56C4F9FDFF3FE40.mlw
sha1: 42faf2bf97d57ab291519f4d9b6341fd28f5c473
sha256: b143f984cc0745b1529e2253761eaff547509e7fa44d20c220d44d176a7952e7
sha512: 65ba871f6dccea92d6b973fc47d35bc98a7581242b0e4997c56058a5da1b36c9448ac41f78acff3ebc3bcce4ab243a39afb82e20ac4f245e94270985e86bf264
ssdeep: 12288:5Xe9PPlowWX0t6mOQwg1Qd15CcYk0We1NPcOo+shpo7+:ghloDX0XOf4XPe+sk7+
type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

Version Info:

Translation: 0x0809 0x04b0

Malware.AI.214323910 also known as:

Elasticmalicious (high confidence)
CynetMalicious (score: 100)
ALYacAIT.Heur.Acapulco.11.47F0837A.Gen
CylanceUnsafe
Cybereasonmalicious.8503ec
ESET-NOD32a variant of Win32/TrojanDownloader.Autoit.PEK
APEXMalicious
AvastFileRepMalware
KasperskyTrojan-Downloader.Win32.Zenlod.lcz
BitDefenderAIT:Trojan.Nymeria.4901
MicroWorld-eScanAIT:Trojan.Nymeria.4901
TencentWin32.Trojan.Heur.Aish
Ad-AwareAIT:Trojan.Nymeria.4901
SophosGeneric ML PUA (PUA)
McAfee-GW-EditionBehavesLike.Win32.TrojanAitInject.hc
FireEyeAIT:Trojan.Nymeria.4901
EmsisoftAIT:Trojan.Nymeria.4901 (B)
eGambitUnsafe.AI_Score_99%
MicrosoftTrojan:Win32/Wacatac.B!ml
ArcabitAIT.Heur.Acapulco.11.47F0837A.Gen
GDataAIT:Trojan.Nymeria.4901 (3x)
MAXmalware (ai score=80)
MalwarebytesMalware.AI.214323910
FortinetW32/Autoit.PEK!tr
AVGFileRepMalware

How to remove Malware.AI.214323910?

Malware.AI.214323910 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment