Malware

Malware.AI.3940726379 (file analysis)

Malware Removal

The Malware.AI.3940726379 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.3940726379 virus can do?

  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • CAPE detected the shellcode patterns malware family
  • Clears Windows events or logs
  • Touches a file containing cookies, possibly for information gathering
  • Clears web history
  • Yara detections observed in process dumps, payloads or dropped files

How to determine Malware.AI.3940726379?


File Info:

name: FD76FBC1D4496E477C83.mlw
path: /opt/CAPEv2/storage/binaries/f48f6659e02b24e600d4f439fd062c4932f19f98a078e7e797c60df02baf3195
crc32: 12955441
md5: fd76fbc1d4496e477c83b9b2d16b36e4
sha1: 388bba96e8ced4f631aa2c256a98fa0d6cf3a929
sha256: f48f6659e02b24e600d4f439fd062c4932f19f98a078e7e797c60df02baf3195
sha512: bc388e6a5f7d528044e5ab0e67a2bd5353e7413d670aaa70f4d7f22e81a9022de078b6ec718c9d7a95f21172e09ab9021afa3012e233a47d478deb6b32979ab6
ssdeep: 12288:VLv/kAT+c8SJhLJpKxyGlIS5ZdIlZdSJ2feywdiq3:ZvcATV7FJsxyGlIwZijO221
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T18C94E00274E2D8B1C86315704525DF931A7EEE700FE05A93F399327D0F74DE09A29EA6
sha3_384: 29a507be6909dc2a5883f8863cd490b5bd0dce85bdda30c45a4af3c84345044b5a959fb9fc36ba1802dace3e4e7e16fa
ep_bytes: e889040000e980feffff558bec6a00ff
timestamp: 2016-08-01 21:39:01

Version Info:

0: [No Data]

Malware.AI.3940726379 also known as:

BkavW32.AIDetectMalware
LionicTrojan.Win32.Crypren.j!c
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Heur.Mint.Zard.60
SkyhighBehavesLike.Win32.Generic.gc
MalwarebytesMalware.AI.3940726379
SangforTrojan.Win32.Crypren.V532
AlibabaRansom:Win32/Crypren.6320cace
BitDefenderThetaGen:NN.ZexaF.36802.AyW@aeTveOpi
SymantecML.Attribute.HighConfidence
APEXMalicious
TrendMicro-HouseCallTROJ_GEN.R002H09KJ23
KasperskyHEUR:Trojan-Ransom.Win32.Crypren.gen
BitDefenderGen:Heur.Mint.Zard.60
NANO-AntivirusTrojan.Win32.Crypren.kebfeo
AvastFileRepMalware [Inf]
EmsisoftGen:Heur.Mint.Zard.60 (B)
DrWebTrojan.MulDrop24.19673
ZillyaTrojan.Crypren.Win32.1585
Trapminemalicious.high.ml.score
FireEyeGeneric.mg.fd76fbc1d4496e47
SophosMal/Generic-S
SentinelOneStatic AI – Suspicious PE
MAXmalware (ai score=80)
JiangminTrojan.Crypren.afi
GoogleDetected
VaristW32/ABRansom.MNSJ-1619
Antiy-AVLTrojan[Ransom]/Win32.Crypren
KingsoftWin32.Trojan-Ransom.Crypren.gen
MicrosoftTrojan:Win32/Wacatac.B!ml
ArcabitTrojan.Mint.Zard.60
ZoneAlarmHEUR:Trojan-Ransom.Win32.Crypren.gen
GDataGen:Heur.Mint.Zard.60
CynetMalicious (score: 100)
AhnLab-V3Malware/Win.Generic.C5545996
Cylanceunsafe
PandaTrj/Genetic.gen
RisingTrojan.Generic@AI.98 (RDML:YfvJl69+jy4Re/2CKWE9yQ)
IkarusTrojan.Agent.MZ
MaxSecureTrojan.Malware.73698455.susgen
FortinetW32/PossibleThreat
AVGFileRepMalware [Inf]
DeepInstinctMALICIOUS
alibabacloudRansomware:Win/Crypren.gen

How to remove Malware.AI.3940726379?

Malware.AI.3940726379 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment