Categories: Malware

What is “Malware.AI.2593021878”?

The Malware.AI.2593021878 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Malware.AI.2593021878 virus can do?

The binary contains an unknown PE section name indicative of packing
The executable is compressed using UPX
Authenticode signature is invalid

How to determine Malware.AI.2593021878?


File Info:
name: AAF0C7B5EEAE55245D0D.mlwpath: /opt/CAPEv2/storage/binaries/94b3feb927e0c764be471bd0fd2bd9e83d0396e2427d63ec189ff3a1740da181crc32: CE623FEFmd5: aaf0c7b5eeae55245d0d5346ab8aa39csha1: d9342f4a1ab9d0b40721a1bc07784a925e473d61sha256: 94b3feb927e0c764be471bd0fd2bd9e83d0396e2427d63ec189ff3a1740da181sha512: 7a5afeea03aa95f05bd48de31a9423c63ac156b85d4e5b6848a63e9e454b29d1416166cac45ceb552d09ad335d5d001816d538007cecb38f406d1db11597b130ssdeep: 384:VUO5mjHoDplwwUDwHRyeTB14Sd5BBUQl22rwxTSa:aO5mLotlvyeTLDd5BBEewltype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T102D229CBBA0815B3C0661B760496661746FBEF3442BF970D1B8CD95B7C661B8E41C387sha3_384: 3fc73a467753e19c66427bbe669661a4916f6384880f1a182395fe80dbf4341d997f60d2e2fd1d030c34d2c5a57ee8beep_bytes: 60be15e040008dbeeb2fffff5783cdfftimestamp: 2007-01-22 21:51:22
Version Info:
0: [No Data]

Malware.AI.2593021878 also known as:

Bkav	W32.AIDetect.malware1
MicroWorld-eScan	Generic.Malware.SF!dld!.248F2D4F
FireEye	Generic.mg.aaf0c7b5eeae5524
ALYac	Generic.Malware.SF!dld!.248F2D4F
Cylance	Unsafe
Sangfor	Suspicious.Win32.Save.a
Cybereason	malicious.5eeae5
BitDefenderTheta	AI:Packer.1B52E5EF1D
Cyren	W32/Agent.EPB.gen!Eldorado
Elastic	malicious (moderate confidence)
ESET-NOD32	Win32/TrojanDownloader.Agent.NIV
ClamAV	Win.Downloader.2666-1
BitDefender	Generic.Malware.SF!dld!.248F2D4F
APEX	Malicious
Ad-Aware	Generic.Malware.SF!dld!.248F2D4F
Emsisoft	Generic.Malware.SF!dld!.248F2D4F (B)
Comodo	Packed.Win32.MUPX.Gen@24tbus
F-Secure	Trojan.TR/Crypt.ULPM.Gen
DrWeb	Trojan.DownLoader.19447
Sophos	Generic ML PUA (PUA)
Ikarus	Trojan-Dropper.Agent
GData	Generic.Malware.SF!dld!.248F2D4F
Jiangmin	Trojan.Multi.jtu
Avira	TR/Crypt.ULPM.Gen
MAX	malware (ai score=85)
Arcabit	Generic.Malware.SF!dld!.248F2D4F
Microsoft	Trojan:Win32/Wacatac.B!ml
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win32.Agent.C58510
McAfee	GenericRXAA-FA!AAF0C7B5EEAE
VBA32	BScope.TrojanDownloader.Agent
Malwarebytes	Malware.AI.2593021878
Avast	Win32:DropperX-gen [Drp]
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/ULPM.16C0!tr
AVG	Win32:DropperX-gen [Drp]
CrowdStrike	win/malicious_confidence_100% (D)