Malware

Malware.AI.2604320568 information

Malware Removal

The Malware.AI.2604320568 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.2604320568 virus can do?

  • Performs HTTP requests potentially not found in PCAP.
  • Unconventionial binary language: Chinese (Simplified)
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid
  • Attempts to modify proxy settings
  • Touches a file containing cookies, possibly for information gathering
  • Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Malware.AI.2604320568?


File Info:

name: 19F767A1149B093AAFFE.mlw
path: /opt/CAPEv2/storage/binaries/acd7fbfab58404178dc339e22be1cdc824b7e2605b6d7d7fb98eabf2ea6f871f
crc32: 662465C8
md5: 19f767a1149b093aaffe0872edbd30d0
sha1: 4e2e98f63386208688b429458e760453bd930f5e
sha256: acd7fbfab58404178dc339e22be1cdc824b7e2605b6d7d7fb98eabf2ea6f871f
sha512: f0289f177bd4c6b9ca389812503e36846934385deab4aa1db55d76dcaf2d67f5e3632006619f81480f8e13dbbae89b84194b9080975b77a36e5c479a795551fa
ssdeep: 12288:D4ENgVmH2OIloj13vvbQmjNAEdJjp3LZyTLty0CIp2f4jRtmysndQ:rmmWOj13NZdb9yTLtHjw4lt1sndQ
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T17B351811B2835C32C1A349FBC9DBA2744825BD532A179B4A37B53E0B3F7578368261B7
sha3_384: 92d46c9f9fb275402b30956d65696fb1a4071d5968a8201e37852aa251dc11fcd53f53feb854502bdd7fa1fdc985cb46
ep_bytes: 558bec83c4e033c08945e48945e08945
timestamp: 1992-06-19 22:22:17

Version Info:

CompanyName:
FileDescription:
FileVersion:
InternalName:
LegalCopyright:
LegalTrademarks:
OriginalFilename:
ProductName:
ProductVersion:
Comments:
Translation: 0x0804 0x03a8

Malware.AI.2604320568 also known as:

BkavW32.AIDetectMalware
Elasticmalicious (moderate confidence)
MicroWorld-eScanGen:Variant.Jaik.197901
FireEyeGeneric.mg.19f767a1149b093a
SkyhighBehavesLike.Win32.Backdoor.tm
MalwarebytesMalware.AI.2604320568
Cybereasonmalicious.633862
BitDefenderThetaGen:NN.ZelphiCO.36792.fH0@am4xH6ij
APEXMalicious
BitDefenderGen:Variant.Jaik.197901
EmsisoftGen:Variant.Jaik.197901 (B)
VIPREGen:Variant.Jaik.197901
SophosGeneric ML PUA (PUA)
SentinelOneStatic AI – Suspicious PE
Antiy-AVLTrojan/Win32.Delf.sqa
Kingsoftmalware.kb.a.989
ArcabitTrojan.Jaik.D3050D
GDataWin32.Trojan.PSE.101D682
GoogleDetected
ALYacGen:Variant.Jaik.197901
MAXmalware (ai score=87)
VBA32TScope.Trojan.Delf
IkarusTrojan.Win32.LockScreen
MaxSecureTrojan.Malware.300983.susgen

How to remove Malware.AI.2604320568?

Malware.AI.2604320568 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment