Malware

How to remove “Malware.AI.3764991824”?

Malware Removal

The Malware.AI.3764991824 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.3764991824 virus can do?

  • SetUnhandledExceptionFilter detected (possible anti-debug)
  • Executed a command line with /C or /R argument to terminate command shell on completion which can be used to hide execution
  • Presents an Authenticode digital signature
  • Possible date expiration check, exits too soon after checking local time
  • Dynamic (imported) function loading detected
  • Reads data out of its own binary image
  • Unconventionial language used in binary resources: Korean
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • Authenticode signature is invalid
  • Uses Windows utilities for basic functionality
  • Created a process from a suspicious location

How to determine Malware.AI.3764991824?


File Info:

name: A09CF1B2CA3238C5CAA7.mlw
path: /opt/CAPEv2/storage/binaries/be58ba82312c6534a4fd5b3f3525244a6c4a50c79752a0eadcc17f9143e0aea6
crc32: 11A962A6
md5: a09cf1b2ca3238c5caa7eb1e9b2dc78c
sha1: 6a339ce626cd2a869c6f6b89a06fa2e2622db711
sha256: be58ba82312c6534a4fd5b3f3525244a6c4a50c79752a0eadcc17f9143e0aea6
sha512: 25f4380371dcc999af7b70d21af086e4c75c1c1050ffd950615b63fc047bf2a16e873e0b59b516994eb75dc0965f043f554fdb0eaea3dcb6171854c39b7258df
ssdeep: 12288:3EuyFSQRIliYa6OFSxW2Gfu0VqF5/KPr+qLjyZ6GP77qFUVpXXivHL:3Eh3RIl3XCSVYu1rWYZDP7bXivr
type: PE32+ executable (GUI) x86-64, for MS Windows
tlsh: T13FC4014D6F8EC004D52892B740A6B7A58025ED60BBF9EEC3B3D9F63C8BB55D14938163
sha3_384: 7d94f2fdeddc64d6df3ea211d648e3d4d212f3bdd89226d444a6ce9ee5b0f9ba2ea6600cbd88dbd2e1d5569396cb9132
ep_bytes: 53565755488d3595d2fdff488dbe0020
timestamp: 2018-06-24 15:04:44

Version Info:

0: [No Data]

Malware.AI.3764991824 also known as:

LionicTrojan.Win32.Agent.i!c
CynetMalicious (score: 99)
FireEyeGeneric.mg.a09cf1b2ca3238c5
McAfeeArtemis!A09CF1B2CA32
Cybereasonmalicious.626cd2
SymantecTrojan.Gen.MBT
TrendMicro-HouseCallTROJ_GEN.R002H0CLD21
KasperskyTrojan-PSW.Win32.Agent.tofh
BitDefenderTrojan.GenericKD.47621154
MicroWorld-eScanTrojan.GenericKD.47621154
AvastWin64:Malware-gen
TencentWin32.Trojan-qqpass.Qqrob.Lkxg
Ad-AwareTrojan.GenericKD.47621154
EmsisoftTrojan.GenericKD.47621154 (B)
McAfee-GW-EditionArtemis!Trojan
SophosMal/Generic-S
APEXMalicious
GDataTrojan.GenericKD.47621154
AviraHEUR/AGEN.1202741
Antiy-AVLTrojan/Generic.ASBOL.C5E3
GridinsoftRansom.Win64.Sabsik.sa
MicrosoftTrojan:Win32/Sabsik.FL.B!ml
ALYacTrojan.GenericKD.47621154
MAXmalware (ai score=80)
MalwarebytesMalware.AI.3764991824
AVGWin64:Malware-gen
PandaTrj/CI.A

How to remove Malware.AI.3764991824?

Malware.AI.3764991824 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment