Categories: Malware

What is “Malware.AI.307741240”?

The Malware.AI.307741240 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Malware.AI.307741240 virus can do?

Drops a binary and executes it
Authenticode signature is invalid
Uses Windows utilities for basic functionality
Creates a copy of itself
Deletes executed files from disk
Collects information to fingerprint the system
Uses suspicious command line tools or Windows utilities

How to determine Malware.AI.307741240?


File Info:
name: 4796E5D9256828082727.mlwpath: /opt/CAPEv2/storage/binaries/47bbc7d5e15a2d708e1156f5636b27bece3f6b6dff678466ba60753ed1d5411dcrc32: BCAFC51Fmd5: 4796e5d9256828082727dd88a4d137f8sha1: bf6d7ca8bc94d366b4e0b9bae70e9d9f4ca4400dsha256: 47bbc7d5e15a2d708e1156f5636b27bece3f6b6dff678466ba60753ed1d5411dsha512: abaa423cf19c642876adc205144a299f921f921d54c3acaa8be29e6d1202dd61a3ad173f5114d33a1086fe730d5304c1f27d07c4afaca027e298a6bb88d3f0e7ssdeep: 1536:7jFHaimc9WZveXH7igsr3lrYLaU3nPpqb/VXJYD/i+IHQe:taidCFgsr376nPA/VX8/i+Iwtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T16F835B11F6C00AAEF871407214EFBB3181BAFD28571E1DE3B298B647A9712D15B32787sha3_384: fa1dd99342032f606b206c45424d109216d5f02cc84d82c0bcf425212a884adbef9e92b7ba475c70f98d967f4cdc888eep_bytes: c705e842410000000000c705dc424100timestamp: 2012-01-07 06:37:44
Version Info:
CompanyName: MTechFileDescription: Shell subsystemFileVersion: 2.1.1.4InternalName: shssys.exeLegalCopyright: Copyright (C) 2020OriginalFilename: shssys.exeProductName: Shell subsystemProductVersion: 2.1.1.4Translation: 0x0400 0x04b0

Malware.AI.307741240 also known as:

Bkav	W32.AIDetect.malware2
Cynet	Malicious (score: 100)
FireEye	Gen:Variant.Lazy.225521
Malwarebytes	Malware.AI.307741240
VIPRE	Gen:Variant.Lazy.225521
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/Agent.ADYK
APEX	Malicious
BitDefender	Gen:Variant.Lazy.225521
MicroWorld-eScan	Gen:Variant.Lazy.225521
Avast	FileRepMalware [Misc]
Ad-Aware	Gen:Variant.Lazy.225521
Emsisoft	Gen:Variant.Lazy.225521 (B)
F-Secure	Trojan.TR/Crypt.XPACK.Gen3
Trapmine	suspicious.low.ml.score
Avira	TR/Crypt.XPACK.Gen3
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
Arcabit	Trojan.Lazy.D370F1
GData	Gen:Variant.Lazy.225521
BitDefenderTheta	Gen:NN.ZexaF.34646.fu0@aeQ!r8hi
ALYac	Gen:Variant.Lazy.225521
MAX	malware (ai score=85)
Cylance	Unsafe
Rising	Trojan.Generic@AI.83 (RDMK:cmRtazohXbv8TpS22hQOytgKAKFf)
AVG	FileRepMalware [Misc]