Malware.AI.3854099797 malicious file

The Malware.AI.3854099797 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.3854099797 virus can do?

SetUnhandledExceptionFilter detected (possible anti-debug)
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine Malware.AI.3854099797?


File Info:
name: F581C12E526DECAAFD61.mlw
path: /opt/CAPEv2/storage/binaries/b0bd10301bd497c0be2723948d7ad2839f199f5decfbd4462864cd7692a92d11
crc32: 57D3CBE4
md5: f581c12e526decaafd619d20d3c3fe51
sha1: c61d48a8b5962a4d4b1816afa252493e6b1ad748
sha256: b0bd10301bd497c0be2723948d7ad2839f199f5decfbd4462864cd7692a92d11
sha512: 0d778614c61c78408c6649bc388a31771ffcf0af6d3df4aeb1210a8a986d2d06b0d619826b5298a44e140c79e8f0e8a820be83af9e3d483086b7fd7a815b8612
ssdeep: 768:WdEK2KBEybtwpM91ivG4KjlfCwci/fecPxpYcaVXyyyZOv4gaOTonu3yUyJCbEBq:85iTQmcDYXy3ZOvOu3yUyJCbEB2l7Xo6
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T156A318D7FA8AEDA3F925173989F58319033DE7C01B828B171D21993A0B175E1BFC5286
sha3_384: 0797d11d67cab1414b7fbc04d7dcb201e1c020cc1e0f1a1a94f51eb82c43a71e7d9be86bd7d4cb2428cea32e96f7a988
ep_bytes: 83ec0cc7053450400000000000e8ae09
timestamp: 2021-12-06 08:25:25

Version Info:
0: [No Data]

Malware.AI.3854099797 also known as:

Bkav	W32.AIDetect.malware1
Elastic	malicious (high confidence)
Cylance	Unsafe
Cyren	W32/Ursu.CT.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
Sophos	Generic ML PUA (PUA)
McAfee-GW-Edition	BehavesLike.Win32.Generic.cm
SentinelOne	Static AI – Malicious PE
FireEye	Generic.mg.f581c12e526decaa
APEX	Malicious
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
VBA32	BScope.Exploit.Agent
Malwarebytes	Malware.AI.3854099797
Rising	Malware.Heuristic!ET#100% (RDMK:cmRtazrRGpJzUH6BbJlGnjd0j/gw)
Ikarus	Trojan.Crypt
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Ursu.558C!tr

How to remove Malware.AI.3854099797?

Malware.AI.3854099797 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X