Malware

What is “Malware.AI.3020438933”?

Malware Removal

The Malware.AI.3020438933 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.3020438933 virus can do?

  • Performs HTTP requests potentially not found in PCAP.
  • Authenticode signature is invalid
  • Attempts to modify proxy settings

How to determine Malware.AI.3020438933?


File Info:

name: 086153C557586033AEDC.mlw
path: /opt/CAPEv2/storage/binaries/f140f9252959fb30bed33d7ce82e1ae6bcd10e7a3c1918ef13f2b83938076ff5
crc32: 761D7DC0
md5: 086153c557586033aedcd2322d314f88
sha1: fc3321c793436c8da4d931d6213a7f471a13857b
sha256: f140f9252959fb30bed33d7ce82e1ae6bcd10e7a3c1918ef13f2b83938076ff5
sha512: 7b27b010fd79bc549d14938b0c84950674aad5eef8c11eb1295e0c7dd17305865e5b80bc7d45f9e63c33512658a2ed6a46daba0aae7f57bbad583a4952aaaaed
ssdeep: 6144:GQAMgEjP/anwEBas9rjHTKkVoHlu2sTd9L8z5qwAO6Ke:GQAqranwEBacrjHTXgttNe
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1AD448E107491C472D87210365974EBB6863EFC350B259ADBB3C41F7EDE703C2AA35A6A
sha3_384: e39ed6316f1cb3cc2d4b19fdfe4b1d7eac17cca29657642c1cd57332e577f129998657b35ba710291437902aaaf5a74e
ep_bytes: e8bd050000e97afeffff8b4df464890d
timestamp: 2022-10-21 00:40:16

Version Info:

0: [No Data]

Malware.AI.3020438933 also known as:

LionicTrojan.Win32.Tepfer.4!c
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.Lazy.151789
FireEyeGeneric.mg.086153c557586033
McAfeeArtemis!086153C55758
CylanceUnsafe
VIPREGen:Variant.Lazy.151789
SangforTrojan.Win32.Save.a
K7AntiVirusTrojan-Downloader ( 005480a41 )
AlibabaTrojanPSW:Win32/Tepfer.263596bb
K7GWTrojan-Downloader ( 005480a41 )
Cybereasonmalicious.557586
BitDefenderThetaAI:Packer.D1FF1C591F
CyrenW32/Agent.EPA.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/TrojanDownloader.Agent.ELB
TrendMicro-HouseCallTROJ_GEN.R002C0WK422
CynetMalicious (score: 100)
KasperskyHEUR:Trojan-PSW.Win32.Tepfer.vho
BitDefenderGen:Variant.Lazy.151789
AvastWin32:DropperX-gen [Drp]
TencentMalware.Win32.Gencirc.10bda0b3
Ad-AwareGen:Variant.Lazy.151789
EmsisoftGen:Variant.Lazy.151789 (B)
DrWebTrojan.DownLoader45.28907
TrendMicroTROJ_GEN.R002C0WK422
McAfee-GW-EditionBehavesLike.Win32.NetLoader.dh
SophosMal/Generic-S
SentinelOneStatic AI – Suspicious PE
GDataWin32.Trojan.PSE.19TTZ22
AviraHEUR/AGEN.1250671
Antiy-AVLTrojan/Generic.ASMalwS.17F
ArcabitTrojan.Lazy.D250ED
MicrosoftTrojan:Win32/Wacatac.B!ml
GoogleDetected
AhnLab-V3Malware/Gen.Generic.C5120832
Acronissuspicious
VBA32BScope.Trojan.Downloader
ALYacGen:Variant.Lazy.151789
MAXmalware (ai score=80)
MalwarebytesMalware.AI.3020438933
APEXMalicious
RisingStealer.Tepfer!8.13357 (TFE:5:89VrmvP5OHL)
IkarusTrojan-Downloader.Win32.Agent
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Agent.ELB!tr.dldr
AVGWin32:DropperX-gen [Drp]
PandaTrj/Genetic.gen

How to remove Malware.AI.3020438933?

Malware.AI.3020438933 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment