Malware.AI.2873750542 (file analysis)

The Malware.AI.2873750542 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Malware.AI.2873750542 virus can do?

• Behavioural detection: Executable code extraction – unpacking
• Yara rule detections observed from a process memory dump/dropped files/CAPE
• HTTPS urls from behavior.
• CAPE extracted potentially suspicious content
• The binary likely contains encrypted or compressed data.
• Authenticode signature is invalid
• Behavioural detection: Injection (Process Hollowing)
• Behavioural detection: Injection (inter-process)
• Behavioural detection: Transacted Hollowing
• CAPE detected the STOP malware family
• Attempts to modify proxy settings
• Creates a copy of itself
• Creates a known STOP-Djvu ransomware decryption instruction / key file.
• Creates a known STOP ransomware variant mutex
• STOP ransomware command line behavior detected
• Uses suspicious command line tools or Windows utilities

How to determine Malware.AI.2873750542?

File Info:
name: F4CC2E3BD626B96F8B3B.mlw
path: /opt/CAPEv2/storage/binaries/bbde706a0265bed0ebe63384eb432b96d77d7e61eb15ea61a641926cd119ca70
crc32: FD1F9656
md5: f4cc2e3bd626b96f8b3b3a5a86b9e2ed
sha1: eb15d16ec4c411afda8d8e0fe297fdb1cd6bd8e1
sha256: bbde706a0265bed0ebe63384eb432b96d77d7e61eb15ea61a641926cd119ca70
sha512: 3d147a42db8ec942d281d49f876f6b30f5d0eb2044e3a6bc68317bb9085a108348ce74c48726e3c85f273ea8b23d274e149a68763a50be3c0600cf66c381890d
ssdeep: 12288:9K49HQtYirc6jQTdKzlFcCsYNUaTLYNhF7yoC3v:9K49wtLA60TdIs2Wa4NhF7BG
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1ECE423576A84C037C75FAF3154329975E377E423026A4E4E3BE516BE2F206D20A6B31B
sha3_384: 0ad620323ccbbb7208946e4ef8da1f22bd1186e363540d08f0382d833893cffc96dc88dbd33d9a7b0d06f03a29702f5a
ep_bytes: e8b6230000e978feffff8bff558bec81
timestamp: 2022-03-05 13:33:50

Version Info:
Translations: 0x0148 0x0079

Malware.AI.2873750542 also known as:

How to remove Malware.AI.2873750542?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.