Malware

What is “Malware.AI.3753198400”?

Malware Removal

The Malware.AI.3753198400 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.3753198400 virus can do?

  • SetUnhandledExceptionFilter detected (possible anti-debug)
  • Executed a command line with /C or /R argument to terminate command shell on completion which can be used to hide execution
  • Yara rule detections observed from a process memory dump/dropped files/CAPE
  • Possible date expiration check, exits too soon after checking local time
  • Dynamic (imported) function loading detected
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • Authenticode signature is invalid
  • Uses Windows utilities for basic functionality
  • Uses Windows utilities for basic functionality

How to determine Malware.AI.3753198400?


File Info:

name: 4076A0A2AA0442A8E77E.mlw
path: /opt/CAPEv2/storage/binaries/28f8813e009088f8630014ea40bef7465d7371040f896da73634899464ebe524
crc32: 97549943
md5: 4076a0a2aa0442a8e77e17a0fa744a19
sha1: ec5fdef20a7585d0257cad376c30164e73657ea2
sha256: 28f8813e009088f8630014ea40bef7465d7371040f896da73634899464ebe524
sha512: 96354997a66a6604089c3b13758e74ea113ab2f9d78d9312811012f37515b18918a49b8f6cbf1c222c6ab4cdbad04b329532cf6186f4f54904a34961304698cf
ssdeep: 6144:4wUdXFz5zvPOEp/2fcOuaNw+iSCec/0Q3Nyih2zKtMoS:vyXpL/2fcnuC7Eih2zKtMoS
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T11A44236B954B8EDBFDABF0B5990B6405C96184DE8904D4209E7D82F43FE5AC018F23EC
sha3_384: b7447c488649824a476868fdcdb6915be58da03d1cff4a62648ac58d309902a798cfb0a17bbc2e839f82dd206781a682
ep_bytes: 60be151041008dbeebfffeff5789e58d
timestamp: 2019-07-30 08:52:45

Version Info:

0: [No Data]

Malware.AI.3753198400 also known as:

LionicTrojan.BAT.Generic.4!c
Elasticmalicious (moderate confidence)
CylanceUnsafe
SangforTrojan.BAT.Generic.ky
K7AntiVirusTrojan ( 0051918e1 )
K7GWTrojan ( 0051918e1 )
CrowdStrikewin/malicious_confidence_90% (W)
BitDefenderThetaGen:NN.ZexaF.34606.pmGfaiNatbe
SymantecML.Attribute.HighConfidence
tehtrisGeneric.Malware
TrendMicro-HouseCallTROJ_GEN.R067H07BI22
Paloaltogeneric.ml
ClamAVWin.Malware.Agen-7532797-0
KasperskyHEUR:Trojan.BAT.Generic
AvastWin32:Malware-gen
RisingTrojan.Generic!8.C3 (CLOUD)
F-SecureTrojan.TR/PSW.Stealer.sjuwc
McAfee-GW-EditionBehavesLike.Win32.Generic.dc
FireEyeGeneric.mg.4076a0a2aa0442a8
SophosMal/Generic-S
IkarusTrojan.Win32
AviraTR/PSW.Stealer.sjuwc
Antiy-AVLTrojan/Win32.Occamy
ZoneAlarmHEUR:Trojan.BAT.Generic
MicrosoftProgram:Win32/Uwamson.A!ml
CynetMalicious (score: 100)
Acronissuspicious
McAfeeArtemis!4076A0A2AA04
VBA32Trojan.Sabsik.FL
MalwarebytesMalware.AI.3753198400
APEXMalicious
TencentMalware.Win32.Gencirc.10ce5381
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.300983.susgen
AVGWin32:Malware-gen
Cybereasonmalicious.20a758

How to remove Malware.AI.3753198400?

Malware.AI.3753198400 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment