Malware

What is “Malware.AI.25505376”?

Malware Removal

The Malware.AI.25505376 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.25505376 virus can do?

  • SetUnhandledExceptionFilter detected (possible anti-debug)
  • Dynamic (imported) function loading detected
  • Reads data out of its own binary image
  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid
  • Harvests cookies for information gathering

How to determine Malware.AI.25505376?


File Info:

name: 9F49FAC2ECFD8981A8AF.mlw
path: /opt/CAPEv2/storage/binaries/35227850dcf9443e6570015c6879938d11a7df5c68e25d25d53e45b7a90e4ff2
crc32: 4831432C
md5: 9f49fac2ecfd8981a8affcc03223840c
sha1: 6951c0eacd519e1fe5dcf4aaeff4e40e10ddfa68
sha256: 35227850dcf9443e6570015c6879938d11a7df5c68e25d25d53e45b7a90e4ff2
sha512: 7f32170cd8174b2eccd76563cf54357d904094bc2a4dc65c8035fa8c5df4e874df9dbc188e0694800795ce4b4049c879d4091ea50635c14cae9451925a88bc67
ssdeep: 12288:9GHCnaomAEg3uPdkgmtX+t42x0Q4bwxO+NRiKoTUf9cbzQK1fK:9GHCm8uPdJmX22QPpNR2TM2bzS
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1CAD4F102BAC598B2D1731D365A349B21693CBD302F66CEDF67842A5EDD211C0DB31BA7
sha3_384: 208070d28cd99365faf7784ff913a04b48485250e1d01b636a4956110a7ad38b5eaf2580fe38d9820b6b5ef99f5065f0
ep_bytes: e866050000e978feffffcccccccccccc
timestamp: 2022-01-24 07:31:18

Version Info:

0: [No Data]

Malware.AI.25505376 also known as:

BkavW32.AIDetect.malware2
LionicTrojan.Win32.Fugrafa.4!c
Elasticmalicious (high confidence)
CynetMalicious (score: 100)
FireEyeGeneric.mg.9f49fac2ecfd8981
McAfeeArtemis!9F49FAC2ECFD
CylanceUnsafe
ZillyaTrojan.Bingoml.Win32.8340
SangforTrojan.Script.Phonzy.C
Cybereasonmalicious.acd519
SymantecBackdoor.Ratenjay
APEXMalicious
AvastWin32:Malware-gen
McAfee-GW-EditionBehavesLike.Win32.Generic.jc
SophosMal/Generic-S
GridinsoftRansom.Win32.Sabsik.sa
ViRobotTrojan.Win32.Z.Fugrafa.628092
MicrosoftTrojan:Win32/Sabsik.TE.B!ml
VBA32BScope.Trojan.Meterpreter
MalwarebytesMalware.AI.25505376
eGambitUnsafe.AI_Score_74%
AVGWin32:Malware-gen
CrowdStrikewin/malicious_confidence_60% (W)

How to remove Malware.AI.25505376?

Malware.AI.25505376 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment