Malware

What is “Malware.AI.274553948”?

Malware Removal

The Malware.AI.274553948 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.274553948 virus can do?

  • Yara rule detections observed from a process memory dump/dropped files/CAPE
  • Creates RWX memory
  • Dynamic (imported) function loading detected
  • CAPE extracted potentially suspicious content
  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid

How to determine Malware.AI.274553948?


File Info:

name: E22F72082A8301042374.mlw
path: /opt/CAPEv2/storage/binaries/9f8943632b9da19d4b9b748a6c4e2951bc62f9b37e07a76d56326074d0126c30
crc32: 9AAA0419
md5: e22f72082a8301042374b4eada6dc29a
sha1: e3bb2089b886e5d93f5cad3a5e475fe31026bcbc
sha256: 9f8943632b9da19d4b9b748a6c4e2951bc62f9b37e07a76d56326074d0126c30
sha512: d6fbac7c0844f7af075ce0a369ebc3fd6907f0744871229a3ea24b0b5d20420a759dd9b1e6cfd2f56fa4cf06339b78a000c2b68e47e41fc93ab43dc6e9cb0e65
ssdeep: 49152:iighMuLecTcDXUOTDTypvE1Cj/GeX1DxWnBW7m6Abe1:iQK+Ys1GpX1NWY7m6Ab8
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T174B523302BF8C4BAC69214754DD85BFAF47AA7520F3594CB23C44F2D6B32692D13A71A
sha3_384: fb49b396c4f7ef3485a972bb618c7e444bc98401ccf3023a56c786d0453d57f623867b993fe93bdc307479810dce4f18
ep_bytes: 558bec6aff6878cc4200689676420064
timestamp: 2018-04-30 12:00:00

Version Info:

CompanyName: Igor Pavlov
FileDescription: 7z SFX
FileVersion: 18.05
InternalName: 7z.sfx
LegalCopyright: Copyright (c) 1999-2018 Igor Pavlov
OriginalFilename: 7z.sfx.exe
ProductName: 7-Zip
ProductVersion: 18.05
Translation: 0x0409 0x04b0

Malware.AI.274553948 also known as:

BkavW32.AIDetect.malware2
LionicTrojan.Win32.Updane.4!c
CylanceUnsafe
SangforTrojan.Win32.Malware.gen
K7AntiVirusRiskware ( 00573f0f1 )
AlibabaTrojan:Win32/Updane.f85af5f9
K7GWRiskware ( 00573f0f1 )
SymantecTrojan.Gen.MBT
ESET-NOD32Win32/Updane.A
APEXMalicious
Paloaltogeneric.ml
KasperskyHEUR:Trojan.Win32.Updane.gen
NANO-AntivirusVirus.Win32.Gen.ccmw
AvastWin32:Malware-gen
TencentTrojan.Win32.BitCoinMiner.la
SophosMal/Inject-GQ
ComodoApplicUnwnt@#17xoby462aap
McAfee-GW-EditionBehavesLike.Win32.PUP.vc
FireEyeGeneric.mg.e22f72082a830104
WebrootW32.Adware.Gen
AviraADWARE/AD.DealPly.fxmlk
Antiy-AVLTrojan/Generic.ASMalwS.2B1B539
MicrosoftPUA:Win32/Vigua.A
CynetMalicious (score: 99)
McAfeeArtemis!E22F72082A83
MAXmalware (ai score=62)
MalwarebytesMalware.AI.274553948
RisingTrojan.Updane!1.B5D7 (CLASSIC)
FortinetW32/Updane.A!tr
AVGWin32:Malware-gen
CrowdStrikewin/malicious_confidence_60% (D)
MaxSecureTrojan.Malware.74549449.susgen

How to remove Malware.AI.274553948?

Malware.AI.274553948 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment