Malware

Malware.AI.2540241887 (file analysis)

Malware Removal

The Malware.AI.2540241887 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.2540241887 virus can do?

  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid
  • Anomalous binary characteristics

How to determine Malware.AI.2540241887?


File Info:

name: FB4B8282C932797D7FD3.mlw
path: /opt/CAPEv2/storage/binaries/1335178f8ec83d1f68623d79c307128337dd57c7341f8c05c534e59f0108da83
crc32: CBA9A046
md5: fb4b8282c932797d7fd39de77053b4b9
sha1: 2c0a288cef18513d20b971533f192cd16d298a59
sha256: 1335178f8ec83d1f68623d79c307128337dd57c7341f8c05c534e59f0108da83
sha512: da3a2a43fdbb00a915fa87511dc869ffbebefa1f08083394f5fa000396cdcbb8eb05b3de039d12c45980d17a298a38c8cf57f366a7789981571074779d212148
ssdeep: 12288:GbruxxSStw6VRT4aqp1E5eJpfg4tUT6QQK7Xtu0hl4UEdtLj6kWeayOtrD38L4ug:GbruxxSStw6VRT4aqp1E5eJpfg4tUT6u
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1F2C4C82FB7451772028203A23A0F99D6F72E9579237A89E0646CC01D2367E7C93BB7D5
sha3_384: 1f71adbfedf2f374349f1279d976025b8883bd3e904ccfaf9fed3fe031e73cbbf5ba48ef94f9374347544007cfeec075
ep_bytes: 6f6e732070726f6772616d732e20596f
timestamp: 1970-01-01 00:00:00

Version Info:

0: [No Data]

Malware.AI.2540241887 also known as:

Elasticmalicious (high confidence)
MicroWorld-eScanTrojan.GenericKD.67044207
FireEyeGeneric.mg.fb4b8282c932797d
McAfeeArtemis!FB4B8282C932
MalwarebytesMalware.AI.2540241887
VIPRETrojan.GenericKD.67044207
SangforTrojan.Win32.Kryptik.V6it
K7AntiVirusTrojan ( 005a14721 )
K7GWTrojan ( 005a14721 )
Cybereasonmalicious.cef185
BitDefenderThetaGen:NN.ZexaF.36196.IWW@ayf8o1d
CyrenW32/Khalesi.J.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/GenKryptik_AGen.WI
APEXMalicious
ClamAVWin.Packed.Lazy-10001745-0
BitDefenderTrojan.GenericKD.67044207
AvastWin32:Evo-gen [Trj]
TencentWin32.Trojan.Crypt.Jjgl
EmsisoftTrojan.GenericKD.67044207 (B)
F-SecureTrojan.TR/Crypt.XPACK.Gen
ZillyaTrojan.GenKryptikAGen.Win32.1783
McAfee-GW-EditionBehavesLike.Win32.Generic.ht
Trapminemalicious.moderate.ml.score
GDataTrojan.GenericKD.67044207
GoogleDetected
AviraTR/Crypt.XPACK.Gen
MAXmalware (ai score=86)
Antiy-AVLTrojan/Win32.GenKryptik
ArcabitTrojan.Generic.D3FF036F
MicrosoftTrojan:Win32/Wacatac.B!ml
CynetMalicious (score: 100)
TrendMicro-HouseCallTROJ_GEN.R002H0AEE23
RisingTrojan.Kryptik!8.8 (CLOUD)
FortinetW32/Razy.373115!dam
AVGWin32:Evo-gen [Trj]
DeepInstinctMALICIOUS
CrowdStrikewin/malicious_confidence_100% (D)

How to remove Malware.AI.2540241887?

Malware.AI.2540241887 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment