Malware.AI.254010575 malicious file

The Malware.AI.254010575 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.254010575 virus can do?

CAPE extracted potentially suspicious content
Authenticode signature is invalid
Binary compilation timestomping detected
Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Malware.AI.254010575?


File Info:
name: 0225A9A71287B176BE1A.mlw
path: /opt/CAPEv2/storage/binaries/510599e2b8a99e02d5f3de355aae1d7c1f2a5eb5690f1e3c4e9c33973ff15a1b
crc32: 56676F48
md5: 0225a9a71287b176be1a5699c43f77fa
sha1: 6b4faf6fa876966e8628dd9512995ea6550da546
sha256: 510599e2b8a99e02d5f3de355aae1d7c1f2a5eb5690f1e3c4e9c33973ff15a1b
sha512: 2819b182ba759a78f50377a5d6eb2ab48c0539b310bbcdc70cca8e74cee02335ce8b9f82a61fff4038d2ee19b876f437e1bd181bf2f3189797c4cbe88a67c9b8
ssdeep: 24576:ygGMOoa098kaqrAkly3UEILzRvTYFLvl2RAKBXCPbgLxnf0TrwghTN4bWiIbdRv2:yHa8bk2oBOA6j0gb4bQbDtObj
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T1ABD58C51779C6594E1FBD278CD628B94E537BD208A30C68F3269129CEF73AD08E75322
sha3_384: 2e3d504452364dd13379e36c44094cae0807e74e14ca533e642b0fa5dff92bf4aff7cdce08d02d747920a66700c41644
ep_bytes: ff250020400000000000000000000000
timestamp: 2089-03-21 15:19:13

Version Info:
Translation: 0x0000 0x04b0
Comments: Free SS Tool
CompanyName: SMT
FileDescription: SMT
FileVersion: 3.01
InternalName: SMT.exe
LegalCopyright: Copyright ©  2020
LegalTrademarks: 
OriginalFilename: SMT.exe
ProductName: SMT
ProductVersion: 3.01
Assembly Version: 3.1.0.0

Malware.AI.254010575 also known as:

Lionic	Trojan.Win32.Razy.4!c
MicroWorld-eScan	Gen:Variant.Razy.807752
ALYac	Gen:Variant.Razy.807752
Malwarebytes	Malware.AI.254010575
VIPRE	Gen:Variant.Razy.807752
Sangfor	Trojan.Win32.Razy.Vt96
CrowdStrike	win/malicious_confidence_60% (D)
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (moderate confidence)
BitDefender	Gen:Variant.Razy.807752
Emsisoft	Gen:Variant.Razy.807752 (B)
McAfee-GW-Edition	Artemis
FireEye	Generic.mg.0225a9a71287b176
SentinelOne	Static AI – Malicious PE
GData	Gen:Variant.Razy.807752
MAX	malware (ai score=85)
Antiy-AVL	GrayWare/Win32.Wacapew
Arcabit	Trojan.Razy.DC5348
Microsoft	Program:Win32/Wacapew.C!ml
Google	Detected
AhnLab-V3	Trojan/Win32.Wacatac.C4200264
McAfee	Artemis!0225A9A71287
VBA32	Downloader.MSIL.Pabin.Heur
Cylance	unsafe
TrendMicro-HouseCall	TROJ_GEN.R002H09DQ23
Ikarus	not-a-virus:PSWTool.Win32.Messen
MaxSecure	Trojan.Malware.109691777.susgen
DeepInstinct	MALICIOUS

How to remove Malware.AI.254010575?

Malware.AI.254010575 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X