Malware

Malware.AI.2663870057 information

Malware Removal

The Malware.AI.2663870057 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.2663870057 virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • SetUnhandledExceptionFilter detected (possible anti-debug)
  • Creates RWX memory
  • Guard pages use detected – possible anti-debugging.
  • Dynamic (imported) function loading detected
  • Reads data out of its own binary image
  • CAPE extracted potentially suspicious content
  • Drops a binary and executes it
  • Authenticode signature is invalid
  • Created a process from a suspicious location
  • Creates known Njrat/Bladabindi RAT registry keys

How to determine Malware.AI.2663870057?


File Info:

name: 3DB2942A661FA83FA1B8.mlw
path: /opt/CAPEv2/storage/binaries/d8d1240cf7950bd0f603d11263b16afc9965b399892825ff796b8cbaadf2f9ae
crc32: B55D4B98
md5: 3db2942a661fa83fa1b8ea49b53d9174
sha1: deacd9b76e6f4337e1f6eb26425661b6a4d3ba38
sha256: d8d1240cf7950bd0f603d11263b16afc9965b399892825ff796b8cbaadf2f9ae
sha512: 69320939bca7e3b9355d8ba0cb0496b3b1e1c77f09c181da1b8bce15fe527426c0ca7a607e7da5cc53de8815e6d1dda3bf53bacf34f7ea17b8103e1141ed53d1
ssdeep: 6144:Knx1Lke9wNY6B4wCEBz+S/6FbKJt5PnyVFTfd5:wke9wNY6wEBz+SSe0VFTfd5
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T18944F12BF9D8D5A6C301A8316C2BD7B862F1AE4157E1210617E67E7FF0B9B120D0D25E
sha3_384: bcc734b535a102b92bc07fbae4e0a6f69e6c0b35f7d5f2ae3e5edfa84eed5f7abf4e3d1f9dadb8f7dc46b6afae30e53e
ep_bytes: 81ec800100005355565733db68018000
timestamp: 2015-12-27 05:38:55

Version Info:

0: [No Data]

Malware.AI.2663870057 also known as:

LionicTrojan.MSIL.Generic.4!c
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.MSILPerseus.206933
ALYacGen:Variant.MSILPerseus.206933
CylanceUnsafe
ZillyaBackdoor.Generic.Win32.2194
SangforSuspicious.Win32.Save.a
K7AntiVirusTrojan ( 004928a51 )
AlibabaBackdoor:MSIL/Bladabindi.c763a7b5
K7GWTrojan ( 004928a51 )
Cybereasonmalicious.a661fa
CyrenW32/S-3199db3a!Eldorado
SymantecBackdoor.Ratenjay
ESET-NOD32MSIL/Bladabindi.BB
APEXMalicious
Paloaltogeneric.ml
KasperskyHEUR:Backdoor.MSIL.Generic
BitDefenderGen:Variant.MSILPerseus.206933
NANO-AntivirusTrojan.Win32.Bladabindi.fhzoim
AvastWin32:Rootkit-gen [Rtk]
TencentMsil.Backdoor.Generic.Lnyg
EmsisoftGen:Variant.MSILPerseus.206933 (B)
ComodoMalware@#1liji30dhy2kl
DrWebTrojan.DownLoader24.52933
TrendMicroTROJ_BLADABINDI_GE020010.UVPM
McAfee-GW-EditionBehavesLike.Win32.Vopak.dc
FireEyeGeneric.mg.3db2942a661fa83f
SophosMal/Generic-S
IkarusTrojan.MSIL.Bladabindi
GDataGen:Variant.MSILPerseus.206933
JiangminBackdoor.MSIL.bsee
AviraHEUR/AGEN.1112142
Antiy-AVLTrojan/Generic.ASMalwS.200329D
MicrosoftBackdoor:MSIL/Bladabindi.AJ
CynetMalicious (score: 99)
McAfeeArtemis!3DB2942A661F
MAXmalware (ai score=89)
VBA32Backdoor.MSIL.Bladabindi
MalwarebytesMalware.AI.2663870057
TrendMicro-HouseCallTROJ_BLADABINDI_GE020010.UVPM
YandexBackdoor.Bladabindi!/CjzKYq7yME
SentinelOneStatic AI – Malicious PE
eGambitUnsafe.AI_Score_99%
FortinetMSIL/Generic.AP.CA260!tr
BitDefenderThetaGen:NN.ZemsilF.34062.rq1@aK2pm8b
AVGWin32:Rootkit-gen [Rtk]
PandaTrj/CI.A
CrowdStrikewin/malicious_confidence_100% (W)

How to remove Malware.AI.2663870057?

Malware.AI.2663870057 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment