Malware

How to remove “Malware.AI.3579558068”?

Malware Removal

The Malware.AI.3579558068 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.3579558068 virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Sample contains Overlay data
  • Reads data out of its own binary image
  • CAPE extracted potentially suspicious content
  • Drops a binary and executes it
  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid
  • Uses Windows utilities to create a scheduled task
  • Behavioural detection: Transacted Hollowing
  • Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Malware.AI.3579558068?


File Info:

name: FF8AE8796FC2EECCEC0D.mlw
path: /opt/CAPEv2/storage/binaries/8f53d15b43e8d9c63c438c56be4bb4654753db2802a573d3e9818ebf4747832e
crc32: AF1DCA3A
md5: ff8ae8796fc2eeccec0df05fdf235681
sha1: e6c800850fda000971aac18d2768b57b3d09262a
sha256: 8f53d15b43e8d9c63c438c56be4bb4654753db2802a573d3e9818ebf4747832e
sha512: c4880ce8e386d77ad394b995fcaf3b592d663c0c4835749a9b0ecccf4d917a9a28552a8def5aa95e6e7b3e4169e47331d28ac642f15be0ed9da9066edcb4e7d8
ssdeep: 98304:li3XXn0GYUrVuxJJhof2+5OyDu/zAa482C8MYeFkn:83nkUhoof2+5u7Aa482Cz9m
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1FD263322F7099CF3CA3F0D37E8C3872016AFAC51B6B4C556266C73892C7C7169D5A58A
sha3_384: 073e2ba88256d202aade92b1e3d393cbca46a6993ec40060ce89efcfcf307296de8f0842762f7f039dd9025893691b82
ep_bytes: 558bec83c4d453565733c08945f08945
timestamp: 2024-01-07 21:38:03

Version Info:

Comments: This installation was built with Inno Setup: http://www.innosetup.com
CompanyName:
FileDescription: VB Office Scripts Setup
FileVersion:
InternalName:
OriginalFilename:
ProductName:
ProductVersion:
Translation: 0x0409 0x04e4

Malware.AI.3579558068 also known as:

BkavW32.AIDetectMalware
MicroWorld-eScanGen:Heur.Munp.1
SkyhighBehavesLike.Win32.PUPInstaller.rc
MalwarebytesMalware.AI.3579558068
VIPREGen:Heur.Munp.1
CrowdStrikewin/malicious_confidence_90% (D)
ArcabitTrojan.Munp.1
Elasticmalicious (high confidence)
ESET-NOD32a variant of Win32/TrojanDropper.Agent.SLC
APEXMalicious
BitDefenderGen:Heur.Munp.1
EmsisoftGen:Heur.Munp.1 (B)
SentinelOneStatic AI – Suspicious PE
MAXmalware (ai score=87)
MicrosoftTrojan:Win32/Wacatac.B!ml
GDataGen:Heur.Munp.1
FortinetW32/Agent.SLC!tr

How to remove Malware.AI.3579558068?

Malware.AI.3579558068 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment