Malware

Malware.AI.377519932 (file analysis)

Malware Removal

The Malware.AI.377519932 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.377519932 virus can do?

  • Yara rule detections observed from a process memory dump/dropped files/CAPE
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid

How to determine Malware.AI.377519932?


File Info:

name: C48371C0F614E93E3C39.mlw
path: /opt/CAPEv2/storage/binaries/6259164b6cd25047189476100ab5109db986040c3137b6392636498bb7b452bc
crc32: B12F2A0F
md5: c48371c0f614e93e3c39ac96bfad6b8c
sha1: 67b6fc7a0815cbeb533a2144de3149a859752a2c
sha256: 6259164b6cd25047189476100ab5109db986040c3137b6392636498bb7b452bc
sha512: 9f7b903feccced6defedff03fef96eaac48d7d76233d88a0337c894cedfbbb6bf819048ef4897872cb33a032a8b4876882663f407007a637eca2ebd4586df830
ssdeep: 24576:J0FoDW9hddcEiXjG5NxnGBPSTJmc5VIH06iyLlelC:M/93DhGmzHIU6ig
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T152357B09FD814E61C87AAA3018EFF336C6305D5D6617D717AF5FAE20BA2B3505E4C289
sha3_384: 875c4144a62dd847482cbed77691214d2f45216ca86507cf2566dfbaf61cf04cce0adc9d705bfa5516e3d530a4c44cf4
ep_bytes: c7050c61510001000000e981fcffff90
timestamp: 2022-08-09 07:40:26

Version Info:

0: [No Data]

Malware.AI.377519932 also known as:

LionicTrojan.Win32.Stealer.12!c
MicroWorld-eScanGen:Variant.Fragtor.128210
FireEyeGeneric.mg.c48371c0f614e93e
ALYacGen:Variant.Fragtor.128210
VIPREGen:Variant.Fragtor.128210
SangforWorm.Win32.Bingoml.Vrpd
K7AntiVirusTrojan ( 0058f5441 )
AlibabaWorm:Win32/Bingoml.e9f1eb43
K7GWTrojan ( 0058f5441 )
CrowdStrikewin/malicious_confidence_60% (W)
BitDefenderThetaGen:NN.ZexaF.34592.gLW@aS!k63m
SymantecML.Attribute.HighConfidence
Elasticmalicious (high confidence)
ESET-NOD32a variant of Win32/Agent.OJD
APEXMalicious
TrendMicro-HouseCallTROJ_GEN.R002C0WHB22
Paloaltogeneric.ml
KasperskyTrojan.Win32.Bingoml.fyan
BitDefenderGen:Variant.Fragtor.128210
AvastWin32:PWSX-gen [Trj]
Ad-AwareGen:Variant.Fragtor.128210
EmsisoftGen:Variant.Fragtor.128210 (B)
ZillyaTrojan.Bingoml.Win32.10433
TrendMicroTROJ_GEN.R002C0WHB22
McAfee-GW-EditionBehavesLike.Win32.Injector.th
SophosMal/Generic-S
GDataGen:Variant.Fragtor.128210
GoogleDetected
AviraWORM/Agent.uodjr
MAXmalware (ai score=86)
Antiy-AVLTrojan/Generic.ASMalwS.8142
MicrosoftTrojan:Win32/Wacatac.B!ml
CynetMalicious (score: 100)
McAfeeGenericRXTX-AE!C48371C0F614
VBA32BScope.TrojanRansom.Agent
MalwarebytesMalware.AI.377519932
IkarusWorm.Win32.Agent
FortinetW32/PossibleThreat
AVGWin32:PWSX-gen [Trj]
Cybereasonmalicious.a0815c
PandaTrj/Chgt.AD

How to remove Malware.AI.377519932?

Malware.AI.377519932 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment