Malware

Malware.AI.3253941345 malicious file

Malware Removal

The Malware.AI.3253941345 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.3253941345 virus can do?

  • Executed a command line with /C or /R argument to terminate command shell on completion which can be used to hide execution
  • Sample contains Overlay data
  • Yara rule detections observed from a process memory dump/dropped files/CAPE
  • Reads data out of its own binary image
  • Authenticode signature is invalid
  • A scripting utility was executed
  • Uses Windows utilities for basic functionality
  • Uses Windows utilities for basic functionality
  • Behavioural detection: Transacted Hollowing
  • Creates a copy of itself
  • Anomalous binary characteristics
  • Uses suspicious command line tools or Windows utilities

How to determine Malware.AI.3253941345?


File Info:

name: B3180FB49EFE8025D976.mlw
path: /opt/CAPEv2/storage/binaries/7bf3464568ffb97116dbf396ad2a86c832418fdd5b6f16ea6c03eee7bf73fa90
crc32: DB340EF5
md5: b3180fb49efe8025d97638d3615b93c6
sha1: e790638bffe289fdf8554ba11a11b3e7f89fa406
sha256: 7bf3464568ffb97116dbf396ad2a86c832418fdd5b6f16ea6c03eee7bf73fa90
sha512: 04c7b70b159a2b3de266f9f1a57c0b301304ff662dbd277f2c85eb12a5883931e2c7063cb4c093f1bb8af7ba51dfdbc7b6117b2d7fcca56c4ff7c0e6e011a94f
ssdeep: 24576:0RmJkcoQricOIQxiZY1iaU+JA9SJ614Jrw+vx:RJZoQrbTFZY1iaU++c65+vx
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T13435E121F9C69036C2F323B19E7EF76A963D79360326D29727C82D315EA05416B39723
sha3_384: 4710262015243ffb45719ac41137a08f02343e3887ba1e5b97ff7a1c50fabb52acfdc8596874b42fcfb1524619478607
ep_bytes: e816900000e989feffffcccccccccc55
timestamp: 2012-01-29 21:32:28

Version Info:

FileDescription:
FileVersion: 3, 3, 8, 1
CompiledScript: AutoIt v3 Script: 3, 3, 8, 1
Translation: 0x0809 0x04b0

Malware.AI.3253941345 also known as:

BkavW32.AIDetect.malware2
LionicTrojan.Script.LodaRat.m!c
Elasticmalicious (high confidence)
MicroWorld-eScanGeneric.LoadaRat.A.A6CAA1B2
ClamAVTxt.Malware.LodaRAT-9769386-0
FireEyeGeneric.mg.b3180fb49efe8025
McAfeeTrojan-AutoIt.g
CylanceUnsafe
SangforTrojan.Win32.Save.a
K7AntiVirusTrojan ( 0056c7c41 )
AlibabaBackdoor:AutoIt/LodaRat.5ced498c
K7GWTrojan ( 0056c7c41 )
CrowdStrikewin/malicious_confidence_100% (W)
CyrenW32/AutoIt.SJ.gen!Eldorado
tehtrisGeneric.Malware
ESET-NOD32a variant of Win32/Autoit.EJ
APEXMalicious
Paloaltogeneric.ml
CynetMalicious (score: 100)
KasperskyHEUR:Backdoor.Script.LodaRat.a
BitDefenderGeneric.LoadaRat.A.A6CAA1B2
AvastAutoIt:KeyLogger-R [Trj]
TencentWin32.Trojan.Agen.Ytjl
Ad-AwareGeneric.LoadaRat.A.A6CAA1B2
SophosGeneric ML PUA (PUA)
DrWebTrojan.MulDrop20.60953
VIPREGeneric.LoadaRat.A.A6CAA1B2
TrendMicroTROJ_GEN.R014C0PIU22
McAfee-GW-EditionBehavesLike.Win32.Dropper.tc
Trapminemalicious.moderate.ml.score
EmsisoftGeneric.LoadaRat.A.A6CAA1B2 (B)
GDataGeneric.LoadaRat.A.A6CAA1B2 (2x)
AviraHEUR/AGEN.1229437
Antiy-AVLTrojan/Generic.ASBOL.C6D6
ArcabitGeneric.LoadaRat.A.A6CAA1B2
MicrosoftPWS:Win32/Zbot!ml
GoogleDetected
Acronissuspicious
BitDefenderThetaAI:Packer.1D0DF3E616
ALYacGeneric.LoadaRat.A.A6CAA1B2
MAXmalware (ai score=84)
VBA32Trojan.Autoit.F
MalwarebytesMalware.AI.3253941345
TrendMicro-HouseCallTROJ_GEN.R014C0PIU22
RisingBackdoor.888Rat/Autoit!1.C8E3 (CLASSIC)
IkarusTrojan.Autoit
MaxSecureTrojan.Autoit.AZA
FortinetAutoIt/Agent.DB!tr
AVGAutoIt:KeyLogger-R [Trj]
Cybereasonmalicious.49efe8

How to remove Malware.AI.3253941345?

Malware.AI.3253941345 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment