Malware

Malware.AI.3404131468 information

Malware Removal

The Malware.AI.3404131468 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.3404131468 virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Creates RWX memory
  • Dynamic (imported) function loading detected
  • Authenticode signature is invalid

How to determine Malware.AI.3404131468?


File Info:

name: 5ABC105DA384C4C83497.mlw
path: /opt/CAPEv2/storage/binaries/904ebc4bb2137ada705a2cf366ff0085ef32bf99ff54fc63871640a4d0acb4b6
crc32: 81518158
md5: 5abc105da384c4c834979f70330b4198
sha1: 23cdd8b6056e76f4a3b5f149713036b234012405
sha256: 904ebc4bb2137ada705a2cf366ff0085ef32bf99ff54fc63871640a4d0acb4b6
sha512: 17a42e5c92650ee3555c03ed9ce833ffaf66ec5cf848a3ea13af4ddb47ed90b76cf3c5127d5d93ecd592c309d9d3a1a78e9b174295dfd0377f150ff02d4bcf8d
ssdeep: 1536:/Tkk4xKQNIMMYxQ6xWqIG6rnAQofzxOaPkYqppvHrPNT617Yw7D24Ytnb6559rRw:d/7PofcAu059rRodcVAGQqqck1MnoH
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1D9543C27DAA89856F92209705D787AB62C275C775801ED0BB382FF4D287268374F731B
sha3_384: cba0be5d86d0b4fe03a9d5a644561fde4e4594007dd6f4e285af21d937189620dbb99d1b0f770f907330b4e612877b07
ep_bytes: 68982b4100e8f0ffffff000000000000
timestamp: 2013-05-16 17:13:07

Version Info:

Translation: 0x0409 0x04b0
Comments: Sip Cracker
CompanyName: Microsoft
FileDescription: Find User&Pass 4 Sip
LegalCopyright: Areef Arafat 0599357258
ProductName: Sip Cracker
FileVersion: 1.00
ProductVersion: 1.00
InternalName: Form81
OriginalFilename: Form81.exe

Malware.AI.3404131468 also known as:

BkavW32.AIDetect.malware1
LionicTrojan.Win32.Johnnie.4!c
Elasticmalicious (high confidence)
MicroWorld-eScanTrojan.Ranapama.AJM
FireEyeGeneric.mg.5abc105da384c4c8
CAT-QuickHealPUA.WacapewVMF.S19740905
McAfeeGenericRXAT-XF!5ABC105DA384
CylanceUnsafe
VIPRETrojan.Win32.Generic!BT
K7AntiVirusUnwanted-Program ( 004d3a2c1 )
K7GWUnwanted-Program ( 004d3a2c1 )
Cybereasonmalicious.da384c
CyrenW32/S-615aa9a4!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/HackTool.SIPCrack.A potentially unsafe
APEXMalicious
Paloaltogeneric.ml
ClamAVWin.Virus.Sality-6828382-0
KasperskyHEUR:HackTool.MSIL.SIPCrack.gen
BitDefenderTrojan.Ranapama.AJM
NANO-AntivirusTrojan.Win32.DownLoad4.fkfdyv
SUPERAntiSpywareTrojan.Agent/Gen-Artemis
AvastWin32:Malware-gen
TencentWin32.Trojan.Graftor.Sysi
Ad-AwareTrojan.Ranapama.AJM
TACHYONTrojan/W32.VB-Agent.282624.BK
SophosGeneric ML PUA (PUA)
ComodoApplication.Win32.HackTool.SIPCrack.A@7cn3ep
DrWebTrojan.DownLoad4.1738
ZillyaTool.SIPCrack.Win32.231
McAfee-GW-EditionBehavesLike.Win32.Generic.dt
EmsisoftTrojan.Ranapama.AJM (B)
IkarusTrojan.Graftor
GDataTrojan.Ranapama.AJM
AviraTR/Graftor.pqienh
ArcabitTrojan.Ranapama.AJM
MicrosoftHackTool:Win32/Occamy.C
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win32.Graftor.R285048
Acronissuspicious
BitDefenderThetaGen:NN.ZevbaF.34294.rm0@auBps1pi
ALYacTrojan.Ranapama.AJM
MAXmalware (ai score=88)
VBA32TScope.Trojan.VB
MalwarebytesMalware.AI.3404131468
YandexTrojan.Graftor!/XkZnQGpqLI
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Agent.ART!tr
AVGWin32:Malware-gen
PandaTrj/CI.A
CrowdStrikewin/malicious_confidence_70% (D)

How to remove Malware.AI.3404131468?

Malware.AI.3404131468 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment