Malware

Malware.AI.361172713 information

Malware Removal

The Malware.AI.361172713 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.361172713 virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Reads data out of its own binary image
  • CAPE extracted potentially suspicious content
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Uses Windows utilities for basic functionality
  • Behavioural detection: Injection (inter-process)
  • Attempts to modify the Microsoft attachment manager possibly to bypass security checks on mail and Internet saved files
  • Harvests cookies for information gathering
  • Anomalous binary characteristics

How to determine Malware.AI.361172713?


File Info:

name: 6516E063E3527E925195.mlw
path: /opt/CAPEv2/storage/binaries/f476f79550da30025ea8d83c04386aa03129a06ec6ca4d3777f644c2ca6db91c
crc32: D19B9CE2
md5: 6516e063e3527e925195ce3e402212e9
sha1: 0be8b4ab92b6ac2f28e5a8a95d3c46ea29b171c1
sha256: f476f79550da30025ea8d83c04386aa03129a06ec6ca4d3777f644c2ca6db91c
sha512: 8e26a5c51c8ad131334a435a61d926d879772bfb97d25298705b3bfe3f66d4bb03f67bdfb7fd342c1f1e89e5fe945dcd6e6b384fb9050367f97236f6398e3d10
ssdeep: 3072:wmafKXg+svMEUSh0SOPNv3QCwdglO49e6DkQp+xNUJLVL7ZebF1ER0BOTOp:ZafKZx7PdkdglO49Mceh80B8O
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1EA04121B7FAF93ADC245A0390A9F9F009C281D17B7B3860287C4EB6AED7A715F915409
sha3_384: a376e20afa38b3697c83558af07cec0e2c16bff7677f59af98a1400cb71304055e5c7f6d3bc5e62d280819c43c8c44b1
ep_bytes: 68556b4200e801000000c3c3023912e5
timestamp: 2001-08-17 20:52:32

Version Info:

Translation: 0x0409 0x04b0
ProductName: susto
FileVersion: 1.00
ProductVersion: 1.00
InternalName: project1
OriginalFilename: project1.exe

Malware.AI.361172713 also known as:

LionicTrojan.Win32.Hupigon.m!c
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.Strictor.51758
FireEyeGeneric.mg.6516e063e3527e92
McAfeeGeneric-FABG!6516E063E352
MalwarebytesMalware.AI.361172713
VIPREGen:Variant.Strictor.51758
SangforSuspicious.Win32.Save.ins
K7AntiVirusTrojan-Downloader ( 002e302e1 )
BitDefenderGen:Variant.Strictor.51758
K7GWTrojan-Downloader ( 002e302e1 )
Cybereasonmalicious.3e3527
VirITBackdoor.RBot.XY
CyrenW32/SuspPack.G.gen!Eldorado
tehtrisGeneric.Malware
ESET-NOD32a variant of Win32/VB.OAI
CynetMalicious (score: 100)
APEXMalicious
KasperskyHEUR:Trojan.Win32.Generic
NANO-AntivirusTrojan.Win32.Hupigon.ecgcj
RisingWorm.VB!8.30 (CLOUD)
Ad-AwareGen:Variant.Strictor.51758
SophosMal/Generic-S
ComodoTrojWare.Win32.PSW.Ldpinch.~NNT@1op6ij
DrWebBackDoor.Generic.3107
ZillyaBackdoor.Hupigon.Win32.124731
McAfee-GW-EditionBehavesLike.Win32.VirRansom.cc
Trapminemalicious.high.ml.score
EmsisoftGen:Variant.Strictor.51758 (B)
AviraTR/Crypt.XPACK.Gen
MicrosoftPWS:Win32/Zbot!ml
SUPERAntiSpywareTrojan.Agent/Gen-Banker
GDataGen:Variant.Strictor.51758
GoogleDetected
AhnLab-V3Trojan/Win32.Hupigon.R5098
BitDefenderThetaAI:Packer.C88B610F20
ALYacGen:Variant.Strictor.51758
MAXmalware (ai score=85)
VBA32TScope.Malware-Cryptor.SB
CylanceUnsafe
PandaGeneric Malware
TencentWin32.Trojan.Generic.Mcnw
YandexPacked/NTkrnl
FortinetW32/FakeAV.FE!tr
AVGWin32:Crypt-JHR [Trj]
AvastWin32:Crypt-JHR [Trj]
CrowdStrikewin/malicious_confidence_90% (W)

How to remove Malware.AI.361172713?

Malware.AI.361172713 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment