Malware

About “Malware.AI.248058774” infection

Malware Removal

The Malware.AI.248058774 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.248058774 virus can do?

  • Sample contains Overlay data
  • Performs HTTP requests potentially not found in PCAP.
  • Reads data out of its own binary image
  • Drops a binary and executes it
  • Authenticode signature is invalid
  • Attempts to repeatedly call a single API many times in order to delay analysis time
  • Attempts to modify proxy settings
  • Anomalous binary characteristics

How to determine Malware.AI.248058774?


File Info:

name: 261B14A10D2C6E6FB2AF.mlw
path: /opt/CAPEv2/storage/binaries/6fd87fbd72c5a947d57652b1bb2d5c71aaf8ee83ff40f8064fcfa327bee8a09f
crc32: 2DF181C7
md5: 261b14a10d2c6e6fb2afb2a20e2219a8
sha1: 641b7c9ed7f3c3c01f8d343b4abd9a71d66f61f9
sha256: 6fd87fbd72c5a947d57652b1bb2d5c71aaf8ee83ff40f8064fcfa327bee8a09f
sha512: 4b73167774e2dee8b7d7f173f5caa3b279a3d0059de96bce5c812471d440ff8d63bca0e8bc587839ac7d8f8b70ae9577329f31766c136b78fc8b685462fcb910
ssdeep: 96:DJOqSX5YquHnnwR2UM2ClAhxUb0qMVI1sxlAVQ:XSMnwR2FBAgb/MVIqlYQ
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1EAC1742B9ED505B7E3BB8731C4F251C5BBB5B0233322899F55B703892C92B829C51B0E
sha3_384: 2ad477142cc9816fbe86b625e03fba8579fef2a6854f6cad6a421fac6e54bc9cca0ba8621a8d99cb0595c0e077d8cbdb
ep_bytes: 558bec81ec3808000053565733f656ff
timestamp: 2013-11-04 05:25:40

Version Info:

0: [No Data]

Malware.AI.248058774 also known as:

BkavW32.AIDetectMalware
LionicTrojan.Win32.Generic.lY5V
Elasticmalicious (high confidence)
MicroWorld-eScanTrojan.Ppatre.Gen.1
FireEyeGeneric.mg.261b14a10d2c6e6f
CAT-QuickHealTrojan.Mauvaise.SL1
SkyhighBehavesLike.Win32.Generic.zt
ALYacTrojan.Ppatre.Gen.1
Cylanceunsafe
ZillyaDownloader.Waski.Win32.54927
SangforTrojan.Win32.Save.a
K7AntiVirusTrojan-Downloader ( 0048f6391 )
BitDefenderTrojan.Ppatre.Gen.1
K7GWTrojan-Downloader ( 0048f6391 )
CrowdStrikewin/malicious_confidence_100% (W)
BitDefenderThetaGen:NN.ZexaF.36792.auX@aWP2rYki
VirITTrojan.Win32.Upatre.BF
SymantecML.Attribute.HighConfidence
tehtrisGeneric.Malware
ESET-NOD32a variant of Win32/TrojanDownloader.Waski.A
APEXMalicious
ClamAVWin.Downloader.Upatre-10007367-0
KasperskyHEUR:Trojan.Win32.Generic
AlibabaTrojan:Win32/Upatre.b686
NANO-AntivirusTrojan.Win32.DownLoad3.jvwmup
ViRobotTrojan.Win.Z.Upatre.6130.S
RisingDownloader.Agent!1.C06E (CLASSIC)
SophosTroj/Upatre-YW
BaiduWin32.Trojan-Downloader.Small.ck
F-SecureTrojan.TR/Crypt.XPACK.Gen7
DrWebTrojan.DownLoad3.28161
VIPRETrojan.Ppatre.Gen.1
TrendMicroTROJ_UPATRE.SM37
Trapminemalicious.moderate.ml.score
EmsisoftTrojan.Ppatre.Gen.1 (B)
SentinelOneStatic AI – Malicious PE
MAXmalware (ai score=85)
JiangminTrojan/Generic.azrvz
WebrootW32.Trojan.Gen
GoogleDetected
AviraTR/Crypt.XPACK.Gen7
VaristW32/S-b8568f35!Eldorado
Antiy-AVLTrojan[Downloader]/Win32.Upatre
Kingsoftmalware.kb.a.995
MicrosoftTrojanDownloader:Win32/Upatre.A
ArcabitTrojan.Ppatre.Gen.1
SUPERAntiSpywareTrojan.Agent/Gen-Downloader
ZoneAlarmHEUR:Trojan.Win32.Generic
GDataWin32.Trojan.PSE.10H4FHC
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win32.Dloader.R87521
Acronissuspicious
VBA32Trojan.Download
DeepInstinctMALICIOUS
MalwarebytesMalware.AI.248058774
PandaTrj/Genetic.gen
TrendMicro-HouseCallTROJ_UPATRE.SM37
TencentTrojan-Downloader.Win32.Small.haa
YandexTrojan.GenAsa!xjw/xZS1BKE
IkarusTrojan-Downloader.Win32.Small
MaxSecureTrojan.Upatre.Gen
FortinetW32/Waski.A!tr
AVGWin32:Waski-A [Trj]
Cybereasonmalicious.ed7f3c
AvastWin32:Waski-A [Trj]

How to remove Malware.AI.248058774?

Malware.AI.248058774 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment