Malware.AI.3506987604 malicious file

The Malware.AI.3506987604 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Malware.AI.3506987604 virus can do?

• Behavioural detection: Executable code extraction – unpacking
• Yara rule detections observed from a process memory dump/dropped files/CAPE
• Performs HTTP requests potentially not found in PCAP.
• Reads data out of its own binary image
• Unconventionial language used in binary resources: Chinese (Simplified)
• The binary contains an unknown PE section name indicative of packing
• The binary likely contains encrypted or compressed data.
• Authenticode signature is invalid
• Uses Windows utilities for basic functionality
• Behavioural detection: Injection (inter-process)
• Attempts to modify proxy settings
• Attempts to modify browser security settings
• Harvests cookies for information gathering
• Anomalous binary characteristics

How to determine Malware.AI.3506987604?

File Info:
name: 611CE951E5CF2EC8F9D3.mlw
path: /opt/CAPEv2/storage/binaries/ec2228d17496ab9a3e01d2f6574504e12b1e9191830c89c0bb90d483b1de2615
crc32: D13D97AD
md5: 611ce951e5cf2ec8f9d30313cc346efe
sha1: f6d4e8ce9fa04263894e195150d22bfc1474174d
sha256: ec2228d17496ab9a3e01d2f6574504e12b1e9191830c89c0bb90d483b1de2615
sha512: 24f129888107e9a65c19594c96989be01fab6093fdab7ac5e37c1a4d5be333c381b14d809f430588e61adb2a2ca0de156e60e449ef02551154afa750c2cc8d77
ssdeep: 24576:CZCTVNf+tFbY3CAv2GllKq/OvS7qSl5TpEtAiP3Pc0Z19yj:C8NmSE84K5TG5E0Z14j
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T14A65125E7F121F17E0E448B52DEE49CE61A0BC2B9775A47BA1B2B10736341F2E6B8341
sha3_384: 96fa527f240d4ea73d2f933066a5401d97399d3c62246def3cf9f2084e0ed26d6583bf4ea60b6dd9901a9339dd7eac07
ep_bytes: e81b0000005650726f7465637420556c
timestamp: 2006-04-01 10:05:09

Version Info:
0: [No Data]

Malware.AI.3506987604 also known as:

How to remove Malware.AI.3506987604?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.