About “Malware.AI.3882482560” infection

The Malware.AI.3882482560 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Malware.AI.3882482560 virus can do?

• Sample contains Overlay data
• Yara rule detections observed from a process memory dump/dropped files/CAPE
• Reads data out of its own binary image
• Drops a binary and executes it
• Unconventionial language used in binary resources: Chinese (Simplified)
• The binary contains an unknown PE section name indicative of packing
• The binary likely contains encrypted or compressed data.
• The executable is compressed using UPX
• Authenticode signature is invalid
• Uses Windows utilities for basic functionality
• Attempts to modify proxy settings
• Creates a copy of itself
• Deletes executed files from disk

How to determine Malware.AI.3882482560?

File Info:
name: 398824E4D665928FC438.mlw
path: /opt/CAPEv2/storage/binaries/3c119682e05a384141d5f84bf282a52f1addaa0e28cb83ead6ac31f93edc6eff
crc32: 626EDFA3
md5: 398824e4d665928fc438902641bf6f11
sha1: 7573b30ab56aedf0fc220c78631bfe3f66036b30
sha256: 3c119682e05a384141d5f84bf282a52f1addaa0e28cb83ead6ac31f93edc6eff
sha512: 6e284ff7d33d72c2956c99713f1871f096ab00293044300b7846cb31f29d5e98d2f296382d56dfd21fb04b13ca8642fe4dfa2f8f443da8ddf6d454d71774c2b8
ssdeep: 1536:bKiJCGGi39mF358pQHwdYHpOhczr0uqPf+bJGx0khEnOzk:bKHi39ExqKAhW0uAwQx3uO
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1279312AADD1D4872E56137BF031E2F914EAE6E1798957BF94DA037E9A0310C644CB02B
sha3_384: 469089c9fd223d3b87b868646a56fe0be38dd34023a428537f832cd49a5ddaa9eccd91db55c275afe70ac566f7c8d978
ep_bytes: 60be00d041008dbe0040feff5783cdff
timestamp: 1992-06-19 22:22:17

Version Info:
0: [No Data]

Malware.AI.3882482560 also known as:

How to remove Malware.AI.3882482560?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.