Malware

How to remove “Malware.AI.253293469”?

Malware Removal

The Malware.AI.253293469 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.253293469 virus can do?

  • Sample contains Overlay data
  • Reads data out of its own binary image
  • CAPE extracted potentially suspicious content
  • Unconventionial language used in binary resources: Spanish (El Salvador)
  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid
  • Behavioural detection: Injection (Process Hollowing)
  • Behavioural detection: Injection (inter-process)

How to determine Malware.AI.253293469?


File Info:

name: 5AE8EBB76390C7F3B890.mlw
path: /opt/CAPEv2/storage/binaries/a3a01ce6aaabeef940b9eeece9f1d73fbf81eb81e7de24090b38c4450cd8a033
crc32: E682AF01
md5: 5ae8ebb76390c7f3b89048607721f379
sha1: 65c2b981ea7bd25d52f4c91a485c2be2727eaed9
sha256: a3a01ce6aaabeef940b9eeece9f1d73fbf81eb81e7de24090b38c4450cd8a033
sha512: d75caebba4e723bd42bf4069e8a8b5e6042b190ef1addd9f1ab166206288cbb3b0ece351ad9dd0000820c8f35ece7855becd00e2a790b8fe689417ca4173bc7c
ssdeep: 24576:ywpmAb0+9+biy5uj6T7YPXW+VyiUdm95WWxx3hV:yutv9+Gy5u00PG+UJm95LxxRV
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1633522077189F53AD01C89F14D17CF36776AB8A31C66B8B765E00D8B307831A6F196EA
sha3_384: be6b1768e59f9d8ca551312828749f6eb6bbd3401e4d26ca82cd8da14208fd5826e3734f47533f7380cd01541c8e5d11
ep_bytes: 558becb90b0000006a006a004975f951
timestamp: 1992-06-19 22:22:17

Version Info:

Comments: http://www.minicrypter.com
CompanyName: MiniCrypter
FileDescription: MiniCrypter
FileVersion: 2.1.9.8
InternalName: MiniCrypter
LegalCopyright: Copyright © 2016-2022 MiniCrypter.com
LegalTrademarks: MiniCrypter
OriginalFilename: MiniCrypter.exe
ProductName: MiniCrypter
ProductVersion: 2.1.9.8
Translation: 0x0409 0x04e4

Malware.AI.253293469 also known as:

LionicTrojan.Win32.Kryptik.4!c
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Trojan.ProcessHijack.dH3@aWiir0nO
ALYacGen:Trojan.ProcessHijack.dH3@aWiir0nO
Cylanceunsafe
ZillyaTrojan.Injector.Win32.1604877
SangforTrojan.Win32.Injector.Vfpt
CrowdStrikewin/malicious_confidence_70% (D)
AlibabaTrojan:Win32/Injector.247
K7GWTrojan ( 0051dc891 )
K7AntiVirusTrojan ( 0051dc891 )
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Injector.DTRX
APEXMalicious
Paloaltogeneric.ml
CynetMalicious (score: 99)
KasperskyHEUR:Trojan.Win32.Kryptik.gen
BitDefenderGen:Trojan.ProcessHijack.dH3@aWiir0nO
NANO-AntivirusVirus.Win32.Gen.ccmw
AvastWin32:Trojan-gen
TencentWin32.Trojan.Kryptik.Fflw
EmsisoftGen:Trojan.ProcessHijack.dH3@aWiir0nO (B)
F-SecureTrojan.TR/ATRAPS.Gen
VIPREGen:Trojan.ProcessHijack.dH3@aWiir0nO
TrendMicroTROJ_GEN.R002C0RL222
McAfee-GW-EditionGenericRXVA-BP!5AE8EBB76390
Trapminemalicious.moderate.ml.score
FireEyeGeneric.mg.5ae8ebb76390c7f3
SophosTroj/EncPk-BR
AviraTR/ATRAPS.Gen
Antiy-AVLTrojan/Win32.Injector
MicrosoftTrojan:Win32/Wacatac.B!ml
ArcabitTrojan.ProcessHijack.EE2C2E
ZoneAlarmHEUR:Trojan.Win32.Kryptik.gen
GDataGen:Trojan.ProcessHijack.dH3@aWiir0nO
GoogleDetected
AhnLab-V3Trojan/Win.Generic.C5343511
McAfeeArtemis!5AE8EBB76390
MAXmalware (ai score=85)
VBA32SScope.Trojan.MBRLock.2121
MalwarebytesMalware.AI.253293469
TrendMicro-HouseCallTROJ_GEN.R002C0RL222
RisingBackdoor.Generic!8.CE (TFE:4:VY3MV3RWQtV)
IkarusTrojan.Inject
MaxSecureTrojan.Malware.73736783.susgen
FortinetW32/DarkKomet.DTRX!tr
BitDefenderThetaAI:Packer.F2A1B72A21
AVGWin32:Trojan-gen
Cybereasonmalicious.76390c
PandaTrj/Chgt.AC

How to remove Malware.AI.253293469?

Malware.AI.253293469 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment