Malware

Malware.AI.3807088441 malicious file

Malware Removal

The Malware.AI.3807088441 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.3807088441 virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Yara rule detections observed from a process memory dump/dropped files/CAPE
  • Creates RWX memory
  • CAPE extracted potentially suspicious content
  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid
  • Detects Sandboxie through the presence of a library
  • Detects Avast Antivirus through the presence of a library
  • Checks the presence of disk drives in the registry, possibly for anti-virtualization
  • Anomalous binary characteristics

How to determine Malware.AI.3807088441?


File Info:

name: 2F1A38FF4C067EB2296E.mlw
path: /opt/CAPEv2/storage/binaries/9980dc4ccd805b1295d6f9b3f7c5c9386f776efbedb330f49e7480cf89680efa
crc32: 8179C8EA
md5: 2f1a38ff4c067eb2296e4feb3cfb68cc
sha1: 56861a1de111b470dbffdb51b265bcb67d51ac61
sha256: 9980dc4ccd805b1295d6f9b3f7c5c9386f776efbedb330f49e7480cf89680efa
sha512: 2c004e7df1ce844edf8dd3c5d123e5081ea4e9f1a138aceda2c4ca0c79d8290c5c9c9aa00b8ae533f340f7e5af72ba55b681716320261a291beef5b3116d0179
ssdeep: 6144:x//CluW8GaYMOZjlRRfCHQ8QSgs961WrIdp3jUcZ5xPSfL2PJ0:J/nL4XaH9LP+rawxaz2PJ0
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T133748D027FB0C03EC60201769F5EE7A5E4F9B6B49D3124433BC01B1DAA789E5D666F1A
sha3_384: e06df85ec81fa4839479844dc58ca1021bc8627cc442ba07a51c760a9c610120babd40badb40fff8d16fd94d4ac71584
ep_bytes: 5590e9ccc5feffde4300685042430064
timestamp: 2019-02-21 16:00:00

Version Info:

0: [No Data]

Malware.AI.3807088441 also known as:

LionicTrojan.Win32.Mokes.m!c
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.Razy.847807
FireEyeGeneric.mg.2f1a38ff4c067eb2
McAfeeGenericRXAA-AA!2F1A38FF4C06
CylanceUnsafe
K7AntiVirusTrojan ( 0056d4961 )
AlibabaBackdoor:Win32/Mokes.eee57c9c
K7GWTrojan ( 0056d4961 )
Cybereasonmalicious.f4c067
CyrenW32/Agent.CSH.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Agent.ACGU
APEXMalicious
AvastWin32:Trojan-gen
KasperskyHEUR:Backdoor.Win32.Mokes.vho
BitDefenderGen:Variant.Razy.847807
ViRobotTrojan.Win32.Z.Razy.342016.L
TencentWin32.Backdoor.Mokes.Hrze
Ad-AwareGen:Variant.Razy.847807
EmsisoftGen:Variant.Razy.847807 (B)
DrWebTrojan.Siggen11.60402
McAfee-GW-EditionBehavesLike.Win32.Generic.fh
SophosMal/Generic-S
IkarusTrojan.Win32.Crypt
GDataGen:Variant.Razy.847807
AviraHEUR/AGEN.1140884
Antiy-AVLTrojan/Generic.ASMalwS.31079FA
GridinsoftRansom.Win32.Sabsik.sa
ArcabitTrojan.Razy.DCEFBF
MicrosoftTrojan:Win32/Sabsik.FL.B!ml
CynetMalicious (score: 100)
AhnLab-V3Malware/Win.Generic.R420657
BitDefenderThetaAI:Packer.4EEAD39E1F
ALYacGen:Variant.Razy.847807
MAXmalware (ai score=89)
VBA32BScope.Backdoor.Mokes
MalwarebytesMalware.AI.3807088441
TrendMicro-HouseCallTROJ_GEN.R002H0CKT21
RisingTrojan.Injector!1.D328 (CLASSIC)
SentinelOneStatic AI – Suspicious PE
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Agent.ACGU!tr
AVGWin32:Trojan-gen
Paloaltogeneric.ml
CrowdStrikewin/malicious_confidence_100% (W)

How to remove Malware.AI.3807088441?

Malware.AI.3807088441 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment