Malware

Malware.AI.2148037840 malicious file

Malware Removal

The Malware.AI.2148037840 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.2148037840 virus can do?

  • Executable code extraction
  • Attempts to connect to a dead IP:Port (4 unique times)
  • Creates RWX memory
  • A process attempted to delay the analysis task.
  • Reads data out of its own binary image
  • A process created a hidden window
  • Drops a binary and executes it
  • Performs some HTTP requests
  • Uses Windows utilities for basic functionality
  • Attempts to create or modify system certificates

Related domains:

z.whorecord.xyz
a.tomx.xyz
fatihrehberlik.com
testanket.com
apps.identrust.com

How to determine Malware.AI.2148037840?


File Info:

crc32: FCC730FA
md5: 76d5c615c987a1c38652ad3af8085107
name: 76D5C615C987A1C38652AD3AF8085107.mlw
sha1: 213ba8ad7aa48d3d072f4db68f76bbe536776041
sha256: 5b76fb529b0d7dfaea04c165674419a3857a11cab04b165b6c09a03e82afce18
sha512: 42b1ef9452ff3cc47dfed30a389ad7e925cb7be24acf599db9c9d8ea5cf79e902f5a397e39f4251f78c6212999c5f0fbb77eab772ff37107d9ff7e62e79a3848
ssdeep: 24576:4W6VXRh5wzyNxPViRSnNr6WKy85X+h93BmoPgXd9G8PzeA/SgeZOrE+Q/mmg:d6SyvdiRCEX+7hWd9G8PzeA/SgeZGQ/g
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Malware.AI.2148037840 also known as:

LionicVirus.Win32.Generic.n!c
Elasticmalicious (high confidence)
CynetMalicious (score: 99)
ALYacTrojan.GenericKD.37246887
CylanceUnsafe
AlibabaTrojan:MSIL/Generic.ab9a2df4
Cybereasonmalicious.d7aa48
CyrenW32/MSIL_Agent.DX.gen!Eldorado
SymantecTrojan.Gen.MBT
ESET-NOD32a variant of MSIL/Agent.SKC
APEXMalicious
AvastWin32:Trojan-gen
BitDefenderTrojan.GenericKD.37246887
NANO-AntivirusTrojan.Win32.Johnnie.fhrmuh
MicroWorld-eScanTrojan.GenericKD.37246887
TencentWin32.Trojan.Johnnie.Ajvp
SophosMal/Generic-S
ComodoMalware@#3mgqsomp9pak9
TrendMicroTROJ_GEN.R002C0PGG21
McAfee-GW-EditionBehavesLike.Win32.Generic.tc
FireEyeGeneric.mg.76d5c615c987a1c3
EmsisoftTrojan.GenericKD.37246887 (B)
SentinelOneStatic AI – Malicious SFX
AviraHEUR/AGEN.1127746
MicrosoftTrojan:Win32/Wacatac.B!ml
GDataTrojan.GenericKD.37246887
McAfeeArtemis!76D5C615C987
MAXmalware (ai score=100)
MalwarebytesMalware.AI.2148037840
PandaTrj/CI.A
TrendMicro-HouseCallTROJ_GEN.R002C0PGG21
YandexTrojan.Agent!FKV1jE6qZXo
IkarusTrojan.MSIL.Agent
FortinetPossibleThreat
AVGWin32:Trojan-gen
Paloaltogeneric.ml

How to remove Malware.AI.2148037840?

Malware.AI.2148037840 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment