About “Malware.AI.3379067412” infection

The Malware.AI.3379067412 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Malware.AI.3379067412 virus can do?

• Sample contains Overlay data
• Performs HTTP requests potentially not found in PCAP.
• Drops a binary and executes it
• Unconventionial language used in binary resources: Serbian (Cyrillic)
• The binary contains an unknown PE section name indicative of packing
• The binary likely contains encrypted or compressed data.
• The executable is compressed using UPX
• Authenticode signature is invalid
• Attempts to modify proxy settings
• Creates a copy of itself
• Deletes executed files from disk
• Anomalous binary characteristics
• Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Malware.AI.3379067412?

File Info:
name: CC36EAB725F245DFFDBD.mlw
path: /opt/CAPEv2/storage/binaries/38f06aa17420eeec43eef5242e1203d3bc8e32d7039bc657d2ec3f2b4cd3c781
crc32: 6D88C6B5
md5: cc36eab725f245dffdbd486f51dc3fb4
sha1: dde4e5505191e31d091dc3e75b73a377f98102e5
sha256: 38f06aa17420eeec43eef5242e1203d3bc8e32d7039bc657d2ec3f2b4cd3c781
sha512: 5efd52d8dc7977ac2175eb1c242646ec1c3a8c3be8292414579c1a08b3500970662a5b081a1a77b2e3e534fccd5b69980a5d737b4cfbc294869233b053733e99
ssdeep: 49152:0QdF22RhFmlIY6oZ44Jvf1gIDrSIY2rdePP0qNnDYmiDPDi0xUbO8hEP9o8D5iXd:9F2ohFmXPmQrUPnN5ij9eOKy9obZL
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1AD266B02B6E69024F2F75730AD3C57290E767E559FB9C5EF924428C81DB06E0B9307AB
sha3_384: b166f9abb5051ae6170a4ade2df596c7f349012df9139e8efa28165c69ad9d7207dec38ba841937f0035f920c696c5ea
ep_bytes: e87c050000e98efeffffa1f4ca440053
timestamp: 2019-07-11 05:00:00

Version Info:
LegalCopyright: Copyright Opera Software 2019
InternalName: Opera
FileVersion: 62.0.3331.72
CompanyName: Opera Software
ProductName: Opera Installer
ProductVersion: 62.0.3331.72
FileDescription: Opera Installer
Translation: 0x0409 0x04b0

Malware.AI.3379067412 also known as:

How to remove Malware.AI.3379067412?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.