Malware.AI.2988467486 (file analysis)

Malware Removal

The Malware.AI.2988467486 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.2988467486 virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Sample contains Overlay data
  • Reads data out of its own binary image
  • The binary contains an unknown PE section name indicative of packing
  • The executable is compressed using UPX
  • Authenticode signature is invalid

How to determine Malware.AI.2988467486?

File Info:

name: 06375B160ECF5071EDEC.mlw
path: /opt/CAPEv2/storage/binaries/5d94a7b3b9fa186a139d6f549365647910c8e5855c66698f5b112aae0785bdc7
crc32: 510C6AD9
md5: 06375b160ecf5071edecca44043dca7d
sha1: 06d323c958d42bf3ac62fdd0d5b59d2bcfd0a8b8
sha256: 5d94a7b3b9fa186a139d6f549365647910c8e5855c66698f5b112aae0785bdc7
sha512: c3b6dae8078a2e92cccdfbd714c1e6a592e3c4a89e2b8566d423e0ae0e66bd9bbf59202b506932b44da0e647adc28e1e28337ea80a19f4fa14aaaf69227fb173
ssdeep: 49152:pBAgy6/P7faKtQqE62jJMGG9mg/RHUb6LN8JmgLgypeYm:jxrnqqiJMGfg/RclJmg0ysYm
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T178B52302BAC15572C06318771A196B11AA3CBF701BB6CEDB63C46E5F9E119C0DB31BA7
sha3_384: 36dd0a49d7bd96b1823fa5525a4ee24bd9576cd132e15647dded0eef91af48aecfda91fb8751877dea6605d2d7d749ae
ep_bytes: e866050000e978feffffcccccccccccc
timestamp: 2022-03-03 13:15:57

Version Info:

0: [No Data]

Malware.AI.2988467486 also known as:

Elasticmalicious (high confidence)
AvastWin32:Evo-gen [Trj]
SophosGeneric ML PUA (PUA)
CynetMalicious (score: 100)
AVGWin32:Evo-gen [Trj]

How to remove Malware.AI.2988467486?

Malware.AI.2988467486 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment