Malware

What is “Malware.AI.2474483068”?

Malware Removal

The Malware.AI.2474483068 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.2474483068 virus can do?

  • SetUnhandledExceptionFilter detected (possible anti-debug)
  • Behavioural detection: Executable code extraction – unpacking
  • Creates RWX memory
  • Guard pages use detected – possible anti-debugging.
  • Dynamic (imported) function loading detected
  • Reads data out of its own binary image
  • CAPE extracted potentially suspicious content
  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid

How to determine Malware.AI.2474483068?


File Info:

name: 7CEDD8A304E7367BDE5C.mlw
path: /opt/CAPEv2/storage/binaries/cb1e8458b50eabf74a9a4a9463f8f11e8e0d656c4fed50c5bc731ece34d94192
crc32: E3D19E0E
md5: 7cedd8a304e7367bde5cac877854e1cb
sha1: f0a5010d139343023eca41890eee91fb6d3cef5f
sha256: cb1e8458b50eabf74a9a4a9463f8f11e8e0d656c4fed50c5bc731ece34d94192
sha512: a7a4e83f3f4511f2e8111698454d31252b8a80bd4d004b05f4904cced0ec7bb7b421a40b327abbd3afafc433f210d20f47328734cc6aa52d21e86fb4df575345
ssdeep: 24576:XvgiTlHXPiGDX6nooyWwgoDmuHH+jyD4AzJjJ+RDtJU4B5ake+W32TO1cx/wezX9:UGD0yiqHHhUA3gHU4B5ake732Gc7Xize
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1D2652262BAC08571D17728311EF6ABB0263DBC201F248B9BE3987F2E5F355C1651A763
sha3_384: c9e13bdd10cbb2699cb34c1be83a76e7acb16150718b958b85db5483bea7396acb494d57235ff34d96abb5feeb9a1c63
ep_bytes: e832050000e98efeffff3b0db8f04200
timestamp: 2018-09-30 18:01:51

Version Info:

0: [No Data]

Malware.AI.2474483068 also known as:

BkavW32.AIDetect.malware2
LionicTrojan.Win32.Generic.4!c
Elasticmalicious (high confidence)
DrWebTrojan.DownLoad4.14599
MicroWorld-eScanGen:Variant.Zusy.402603
FireEyeGeneric.mg.7cedd8a304e7367b
ALYacGen:Variant.Zusy.402603
CylanceUnsafe
SangforTrojan.Win32.Kryptik.gen
K7AntiVirusTrojan ( 005883ef1 )
AlibabaTrojan:Win32/BunituCrypt.aba89240
K7GWTrojan ( 005883ef1 )
Cybereasonmalicious.d13934
CyrenW32/Injector.ALZ.gen!Eldorado
SymantecTrojan.Gen.MBT
ESET-NOD32a variant of Win32/Injector.EQEX
ZonerProbably Heur.RARAutorun
APEXMalicious
Paloaltogeneric.ml
ClamAVWin.Trojan.Zusy-9907845-0
KasperskyUDS:Trojan.Win32.Kryptik.gen
BitDefenderGen:Variant.Zusy.402603
AvastWin32:MalwareX-gen [Trj]
TencentWin32.Trojan.Kryptik.Ammv
EmsisoftGen:Variant.Zusy.402603 (B)
VIPRETrojan.Win32.Generic!BT
TrendMicroTROJ_GEN.R002C0DJ621
McAfee-GW-EditionBehavesLike.Win32.Generic.tc
SophosMal/Generic-S
SentinelOneStatic AI – Malicious PE
AviraHEUR/AGEN.1205728
MAXmalware (ai score=81)
Antiy-AVLTrojan/Generic.ASMalwS.34ADA4F
MicrosoftTrojan:Win32/Tnega!ml
ZoneAlarmHEUR:Trojan.Win32.Kryptik.gen
GDataGen:Variant.Zusy.402603
CynetMalicious (score: 100)
McAfeeArtemis!7CEDD8A304E7
VBA32BScope.Trojan.Wacatac
MalwarebytesMalware.AI.2474483068
TrendMicro-HouseCallTROJ_GEN.R002C0DJ621
RisingTrojan.GenKryptik!8.AA55 (CLOUD)
YandexTrojan.Kryptik!IVbbRodqpX4
IkarusTrojan.Win32.Krypt
FortinetW32/Kryptik.EPKD!tr
AVGWin32:MalwareX-gen [Trj]
PandaTrj/Genetic.gen
CrowdStrikewin/malicious_confidence_100% (W)

How to remove Malware.AI.2474483068?

Malware.AI.2474483068 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment