Malware

Malware.AI.3928021933 (file analysis)

Malware Removal

The Malware.AI.3928021933 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.3928021933 virus can do?

  • Sample contains Overlay data
  • Yara rule detections observed from a process memory dump/dropped files/CAPE
  • Reads data out of its own binary image
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Uses Windows utilities for basic functionality

How to determine Malware.AI.3928021933?


File Info:

name: 13176721293A9DBBFB4E.mlw
path: /opt/CAPEv2/storage/binaries/b9b2d3d0cb48a073080c6afa18aaf34dc01bcf82900e8260cea119a14c1da66c
crc32: 50C824DB
md5: 13176721293a9dbbfb4ed3506da91ecb
sha1: 2c6cf3f945a54ce16550010b588ea59e1ec65288
sha256: b9b2d3d0cb48a073080c6afa18aaf34dc01bcf82900e8260cea119a14c1da66c
sha512: 14dc93ee1fca9bd9316f38caef9e9271c6e2a2e61175d8ba6837410e26191311233780b188dc1544de8db2188591c621f961883d557608efe0a551b01fc7833f
ssdeep: 49152:Ik7jAiWq8qMly1CDyWLIHbcXYuCcl9r3b+3BxOH9PgrlYLPZaJpW4C2NcqG1DkaY:vjWmDGXYuCcHr+36dPg8PAJg45NHGvO
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T168E5336A79B000DEDED9C5B0813D8F3266F72D928A224757FEA04F6E457F97C901DA80
sha3_384: 628a55eea1d3ca10576845a2e0e9f21a8836415ba12807d7985c8e3d6d8e3775719543b33b1ead05aeeb13a14b681f5f
ep_bytes: 81ec800100005355565733db68018000
timestamp: 2015-12-27 05:38:55

Version Info:

0: [No Data]

Malware.AI.3928021933 also known as:

LionicRiskware.Win32.BitCoinMiner.1!c
FireEyeGeneric.mg.13176721293a9dbb
CylanceUnsafe
K7AntiVirusRiskware ( 00584baa1 )
AlibabaTrojanDownloader:Win32/Generic.3d2f5323
K7GWRiskware ( 00584baa1 )
Cybereasonmalicious.945a54
Elasticmalicious (high confidence)
APEXMalicious
Paloaltogeneric.ml
CynetMalicious (score: 100)
Kasperskynot-a-virus:VHO:RiskTool.Win32.BitCoinMiner.gen
AvastWin32:Malware-gen
TrendMicroTROJ_GEN.R007C0PGJ22
McAfee-GW-EditionBehavesLike.Win32.Generic.wc
SentinelOneStatic AI – Malicious PE
AviraHEUR/AGEN.1233705
MicrosoftTrojan:Win32/Wacatac.B!ml
GoogleDetected
AhnLab-V3Malware/Win.Generic.C5163742
Acronissuspicious
McAfeeArtemis!13176721293A
MalwarebytesMalware.AI.3928021933
TrendMicro-HouseCallTROJ_GEN.R007C0PGJ22
IkarusTrojan.Win64.Rozena
FortinetW32/PossibleThreat
AVGWin32:Malware-gen
CrowdStrikewin/malicious_confidence_70% (W)

How to remove Malware.AI.3928021933?

Malware.AI.3928021933 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment