Malware

What is “Malware.AI.2695111925”?

Malware Removal

The Malware.AI.2695111925 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.2695111925 virus can do?

  • Presents an Authenticode digital signature
  • Dynamic (imported) function loading detected
  • CAPE extracted potentially suspicious content
  • Authenticode signature is invalid
  • CAPE detected the Phonzy malware family
  • Binary compilation timestomping detected

How to determine Malware.AI.2695111925?


File Info:

name: CFAEEE0FD15E32456090.mlw
path: /opt/CAPEv2/storage/binaries/0265c9daa2d9eacf087e00af8c4a16f22b49dc57ca95d2200f4353cac5a0b656
crc32: AAB41AB2
md5: cfaeee0fd15e324560903bd49f1d28bc
sha1: 66e7d6341456e107cab7466384d9601887c74c24
sha256: 0265c9daa2d9eacf087e00af8c4a16f22b49dc57ca95d2200f4353cac5a0b656
sha512: 43c38243c1fd1650fb0f93fd67f39ae9786ab1f320f8b6798ad745fdf634692d617625d240e5b7745da0dea26325684e84ca79cf3e0f3e221443528d04bb042b
ssdeep: 768:IFbHw6eJgC6ftl/fhuWnJ/gz7Dj7VTuh9+BzdKy+Gfl9GflCHfhU:IFbHw6eJF6ftl/fhuWVgz7hTU9D6m
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1E4C239EE5A9C04F3E6AFF632A2D0D9058A359DF21401C66F41CE62074892BE167E537F
sha3_384: 7ff6cbb9baba818aaf5e8519d726bb734ef3de5fa055d9b8018e9a683579be4436b7fdf5db7ee662d1d0d241006ca77a
ep_bytes: ff250020400000000000000000000000
timestamp: 2052-11-03 02:09:02

Version Info:

Translation: 0x0000 0x04b0
Comments:
CompanyName:
FileDescription: ConsoleApp1
FileVersion: 1.0.0.0
InternalName: ConsoleApp1.exe
LegalCopyright: Copyright © 2021
LegalTrademarks:
OriginalFilename: ConsoleApp1.exe
ProductName: ConsoleApp1
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

Malware.AI.2695111925 also known as:

LionicTrojan.MSIL.Crysan.m!c
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.MSILHeracles.19826
ALYacGen:Variant.MSILHeracles.19826
MalwarebytesMalware.AI.2695111925
VIPRETrojan.Win32.Generic!BT
SangforBackdoor.MSIL.Crysan.gen
K7AntiVirusTrojan-Downloader ( 0057eacd1 )
BitDefenderGen:Variant.MSILHeracles.19826
K7GWTrojan-Downloader ( 0057eacd1 )
CrowdStrikewin/malicious_confidence_90% (W)
CyrenW32/MSIL_Agent.BZW.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of MSIL/TrojanDownloader.Agent.IFX
Paloaltogeneric.ml
KasperskyHEUR:Backdoor.MSIL.Crysan.gen
AlibabaBackdoor:MSIL/Crysan.ec80d08f
APEXMalicious
RisingMalware.Obfus/MSIL@AI.93 (RDM.MSIL:U2sgF2yymbvzO8aQdnuzVA)
Ad-AwareGen:Variant.MSILHeracles.19826
SophosMal/Generic-S
DrWebTrojan.Siggen15.628
ZillyaDownloader.Agent.Win32.445385
McAfee-GW-EditionArtemis!Trojan
FireEyeGen:Variant.MSILHeracles.19826
EmsisoftGen:Variant.MSILHeracles.19826 (B)
IkarusTrojan-Spy.Agent
JiangminTrojan.MSIL.abwzz
WebrootW32.Trojan.Gen
AviraTR/Dldr.Agent.xaqpl
MicrosoftTrojan:Win32/Wacatac.B!ml
ArcabitTrojan.MSILHeracles.D4D72
ViRobotTrojan.Win32.S.Agent.26832
GDataGen:Variant.MSILHeracles.19826
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win.Generic.C4538318
McAfeeArtemis!CFAEEE0FD15E
MAXmalware (ai score=80)
VBA32TScope.Trojan.MSIL
PandaTrj/GdSda.A
TencentMsil.Trojan-downloader.Agent.Tcwc
YandexTrojan.DL.Agent!5XbKclSUPI0
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.74418669.susgen
FortinetMSIL/Agent.IEX!tr.dldr
AVGWin32:DangerousSig [Trj]
AvastWin32:DangerousSig [Trj]

How to remove Malware.AI.2695111925?

Malware.AI.2695111925 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment