Malware

Malware.AI.3963404207 (file analysis)

Malware Removal

The Malware.AI.3963404207 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.3963404207 virus can do?

  • Reads data out of its own binary image
  • Drops a binary and executes it
  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid
  • Deletes executed files from disk

How to determine Malware.AI.3963404207?


File Info:

name: B38852C959B2B77B759F.mlw
path: /opt/CAPEv2/storage/binaries/7b411c5e410c526fd37507b75e5f14ec6ffb4f3b78e064bf8025e6056ef39234
crc32: EAE2DDEB
md5: b38852c959b2b77b759f0735e76e6e78
sha1: 6a2cba3f035d6a3237fc164c6f3bd3de132856cf
sha256: 7b411c5e410c526fd37507b75e5f14ec6ffb4f3b78e064bf8025e6056ef39234
sha512: 7eb67713d59339f4364b9f693a84d016d53c2ebe4547ea1118f870e034de6818fce30d533aa996e46c6c677f3cfaedff084acf56466c426e4cffe4b53e64ed76
ssdeep: 3072:PKFUH1NcQwST/Rb3sIvApI3qwFTKgcOO+SuPV1nfz8a7j:PKFUVirST5b3bALaA7S1Aa7j
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1B8347B2176C08031D57302B64EEDDBB6557EB8324B629ADBB3F44F1D4A701E29A35723
sha3_384: 0bc772ea60d725746b3ee0031a9071da3025f54d209567ca9715115aba0bfc518a94d54e597c4b2673b5809b3bf61270
ep_bytes: e84e9a0000e9000000006a146818f742
timestamp: 2014-06-29 19:50:06

Version Info:

0: [No Data]

Malware.AI.3963404207 also known as:

BkavW32.AIDetectMalware
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.Ransom.RanzyLocker.5
SkyhighBehavesLike.Win32.Generic.dh
McAfeeTrojan-FESQ!B38852C959B2
MalwarebytesMalware.AI.3963404207
VIPREGen:Variant.Ransom.RanzyLocker.5
SangforMiner.Win32.0055e3fc_0.se2
CrowdStrikewin/malicious_confidence_100% (D)
VirITTrojan.Win32.X-Heur.CN
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/CoinMiner.CDD
APEXMalicious
TrendMicro-HouseCallCoinminer.Win32.MAENER.SMG
ClamAVWin.Malware.Johnnie-6876867-0
KasperskyHEUR:Trojan-Banker.Win32.CoinMiner.gen
BitDefenderGen:Variant.Ransom.RanzyLocker.5
NANO-AntivirusTrojan.Win32.Agent.dbwaaq
AvastWin32:Agent-AUEG [Trj]
TencentTrojan.Win32.Coinminer.aw
EmsisoftGen:Variant.Ransom.RanzyLocker.5 (B)
F-SecureTrojan.TR/Graftor.pqifb
DrWebWin32.HLLW.Digs.15
ZillyaTrojan.CoinMiner.Win32.51326
TrendMicroCoinminer.Win32.MAENER.SMG
Trapminemalicious.high.ml.score
FireEyeGeneric.mg.b38852c959b2b77b
SophosTroj/Miner-TS
IkarusTrojan.Win32.Agentb
JiangminTrojan/Agentb.atu
WebrootW32.Malware.gen
GoogleDetected
AviraTR/Graftor.pqifb
Antiy-AVLTrojan/Win32.Agentb
Kingsoftmalware.kb.a.976
MicrosoftTrojan:Win32/Maener!pz
XcitiumTrojWare.Win32.Graftor.PQIF@5e7luk
ArcabitTrojan.Ransom.RanzyLocker.5
ZoneAlarmHEUR:Trojan-Banker.Win32.CoinMiner.gen
GDataWin32.Trojan.Coinminer.CB
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win.Agent.R639143
BitDefenderThetaAI:Packer.21D0822C1F
ALYacGen:Variant.Ransom.RanzyLocker.5
MAXmalware (ai score=80)
VBA32BScope.Trojan.BtcMine
Cylanceunsafe
PandaTrj/Genetic.gen
RisingTrojan.CoinMiner!1.D0E5 (CLASSIC)
YandexTrojan.GenAsa!eoyQNIJSsnY
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.74542710.susgen
FortinetRiskware/CoinMiner
AVGWin32:Agent-AUEG [Trj]
DeepInstinctMALICIOUS
alibabacloudTrojan:Win/Lakaboy.LY

How to remove Malware.AI.3963404207?

Malware.AI.3963404207 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment