Malware

Malware.AI.2615418441 (file analysis)

Malware Removal

The Malware.AI.2615418441 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.2615418441 virus can do?

  • Unconventionial language used in binary resources: Danish
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Anomalous binary characteristics

How to determine Malware.AI.2615418441?


File Info:

name: 0025B6F7659767E15E73.mlw
path: /opt/CAPEv2/storage/binaries/d8959ef6e22f8f3d2460702b6ef3ec8c03da6832cfae0c57ab1bf392008ba034
crc32: DE530155
md5: 0025b6f7659767e15e739cf392f92efc
sha1: 49942373335065790267505db40e3ce222b3f9ad
sha256: d8959ef6e22f8f3d2460702b6ef3ec8c03da6832cfae0c57ab1bf392008ba034
sha512: 1dad8689666a73a2ec97ab9dd2d089849d4ebb721fd8b0568c010a0b05ce5d21dac128328cc9cb9c19d8cb254ddc32ccdfc12d57dab50ab368aa0329caa07f2b
ssdeep: 24576:O7yduF16GxLv+Uxde4Ga4ty7CIKZkBKGaG:uOo16WLv+Ade4Gm7okBL5
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T13B152310F2EDC470E71631759EA4E7E855ABE8B05BA049DF2BDA01399E4C3E48E7430B
sha3_384: a65f1a93ad02bcbfa2e02e9732b77a26c41d8404f656e17efa7cae362310f5a1f83431e4722f76a8692902048d2eb743
ep_bytes: e8523f0000e989feffffff3548fb4100
timestamp: 2018-07-11 16:53:17

Version Info:

0: [No Data]

Malware.AI.2615418441 also known as:

BkavW32.AIDetect.malware1
LionicTrojan.Win32.GandCrab.4!c
Elasticmalicious (high confidence)
MicroWorld-eScanTrojan.GenericKDZ.45376
CAT-QuickHealTrojan.Mauvaise.SL1
ALYacTrojan.GenericKDZ.45376
SangforWorm.Win32.Save.a
K7AntiVirusTrojan ( 005376ec1 )
AlibabaRansom:Win32/GandCrab.394d8351
K7GWTrojan ( 005376ec1 )
Cybereasonmalicious.765976
SymantecPacked.Generic.525
ESET-NOD32a variant of Win32/Kryptik.GISJ
APEXMalicious
BitDefenderTrojan.GenericKDZ.45376
NANO-AntivirusTrojan.Win32.Stealer.fffduz
SophosMal/Generic-R + Mal/GandCrab-B
ComodoTrojWare.Win32.Ransom.Gandcrab.GI@8023p6
DrWebTrojan.PWS.Stealer.23950
ZillyaTrojan.Kryptik.Win32.1456742
TrendMicroTSPY_EMOTET.SMB1
McAfee-GW-EditionGenericRXGI-WU!0025B6F76597
FireEyeGeneric.mg.0025b6f7659767e1
EmsisoftTrojan.GenericKDZ.45376 (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojan.Chapak.lu
MAXmalware (ai score=100)
Antiy-AVLTrojan/Generic.ASMalwS.26F131E
MicrosoftRansom:Win32/GandCrab.AP
ViRobotTrojan.Win32.U.GandCrab.221184
GDataWin32.Trojan-Ransom.GandCrab.N
CynetMalicious (score: 100)
AhnLab-V3Win-Trojan/MalPe34.Suspicious.X2029
McAfeeGenericRXGI-WU!0025B6F76597
VBA32BScope.Trojan.Vigorf
MalwarebytesMalware.AI.2615418441
TrendMicro-HouseCallTSPY_EMOTET.SMB1
RisingRansom.GandCrypt!8.F33E (CLOUD)
YandexTrojan.Kryptik!pWCiY/2CKug
IkarusTrojan-Dropper.Win32.Danabot
eGambitUnsafe.AI_Score_99%
FortinetW32/Kryptik.GIYJ!tr
PandaTrj/GdSda.A
CrowdStrikewin/malicious_confidence_90% (W)
MaxSecureRansomeware.CRAB.gen

How to remove Malware.AI.2615418441?

Malware.AI.2615418441 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment