Malware.AI.2744045027 (file analysis)

The Malware.AI.2744045027 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.2744045027 virus can do?

The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine Malware.AI.2744045027?


File Info:
name: 47EBE9F8F5F73F07D456.mlw
path: /opt/CAPEv2/storage/binaries/2ed3e37608e65be8b6e8c59f8c93240bd0efe9a60c08c21f4889c00eb6082d74
crc32: A7682D3C
md5: 47ebe9f8f5f73f07d456ec12bb49c75d
sha1: 45672dc9b2eb6972bef8f930505f0ad57550ca4c
sha256: 2ed3e37608e65be8b6e8c59f8c93240bd0efe9a60c08c21f4889c00eb6082d74
sha512: b8f25bf3a83b8c2a715fdfd6efbde53588415a84c2e87308e24aa1eb4783db39dee0f0ec2f5701b8bd848dfdec062557ff51c729264ffc1b2b01b51a3098903b
ssdeep: 24576:9ypcVmmyK+Y8J0r1dpvZlGhiUTPQOMoezwFnKS1yb0zrs7HjeAzgjJENrud9qcju:ecV8Ytr1dhrwierOjeAzBruTqQt02+
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T1AD06F950E8FB40FAF6075A3028ABA16FA3302D159B39EEC7C6547E47E4776D1013366A
sha3_384: ecb23e6660b55409d104b54462220f5b16efe8978597882905d03135736d8f2f05be804fd942f3559292b1293db2d30e
ep_bytes: e9abd8ffffcccccccccccccccccccccc
timestamp: 1970-01-01 00:00:00

Version Info:
0: [No Data]

Malware.AI.2744045027 also known as:

Bkav	W32.Common.7FE124FD
Lionic	Trojan.Win32.Snake.trn9
Elastic	Windows.Ransomware.Snake
MicroWorld-eScan	Trojan.GenericFCA.Agent.90330
ClamAV	Win.Malware.Agent-8236517-0
FireEye	Trojan.GenericFCA.Agent.90330
CAT-QuickHeal	Ransom.Snake.S13954503
Skyhigh	Trojan-Ransom.h
McAfee	Trojan-Ransom.h
Malwarebytes	Malware.AI.2744045027
Zillya	Trojan.Filecoder.Win32.14329
Sangfor	Ransom.Win32.Save.a
K7AntiVirus	Ransomware ( 0056897f1 )
Alibaba	Ransom:Win32/Snake.616a9197
K7GW	Ransomware ( 0056897f1 )
CrowdStrike	win/malicious_confidence_100% (W)
Arcabit	Trojan.GenericFCA.Agent.D160DA
Symantec	Ransom.Gen
ESET-NOD32	a variant of WinGo/Filecoder.Snake.A
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	Trojan-Ransom.Win32.Snake.a
BitDefender	Trojan.GenericFCA.Agent.90330
NANO-Antivirus	Trojan.Win32.Filecoder.hkdkgx
Avast	Win32:Trojan-gen
Tencent	Malware.Win32.Gencirc.115ae8ab
TACHYON	Ransom/W32.Snake.3900928
Sophos	Troj/Ransom-GAT
F-Secure	Trojan.TR/Ransom.zkvfs
DrWeb	Trojan.Siggen9.44911
VIPRE	Trojan.GenericFCA.Agent.90330
TrendMicro	Ransom.Win32.EKANS.B
Emsisoft	Trojan.GenericFCA.Agent.90330 (B)
Ikarus	Trojan-Ransom.Snake
Webroot	W32.Ransom.Snake
Google	Detected
Avira	TR/Ransom.zkvfs
Antiy-AVL	Trojan[Ransom]/Win32.Turla
Xcitium	Malware@#1fo4qpjzegd6f
Microsoft	Ransom:Win32/Snake!MSR
ViRobot	Trojan.Win.Z.Snake.3900928
ZoneAlarm	Trojan-Ransom.Win32.Snake.a
GData	Trojan.GenericFCA.Agent.90330
Varist	W32/ABRansom.QOWH-1541
AhnLab-V3	Trojan/Win32.SnakeRansom.R335473
VBA32	TrojanRansom.Snake
ALYac	Trojan.Ransom.Filecoder
MAX	malware (ai score=100)
Cylance	unsafe
Panda	Trj/CI.A
TrendMicro-HouseCall	Ransom.Win32.EKANS.B
Rising	Trojan.Generic@AI.83 (RDMK:ZZrGyeAtLev3EnJ34sMveg)
Yandex	Trojan.Filecoder!Yi+LClvZRcU
MaxSecure	Trojan.Malware.102149137.susgen
Fortinet	W32/Ekans.F82A!tr.ransom
AVG	Win32:Trojan-gen
DeepInstinct	MALICIOUS

How to remove Malware.AI.2744045027?

Malware.AI.2744045027 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X