Malware

About “Malware.AI.4008068588” infection

Malware Removal

The Malware.AI.4008068588 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.4008068588 virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Yara rule detections observed from a process memory dump/dropped files/CAPE
  • Performs HTTP requests potentially not found in PCAP.
  • CAPE extracted potentially suspicious content
  • Authenticode signature is invalid
  • Attempts to modify proxy settings
  • Anomalous binary characteristics

How to determine Malware.AI.4008068588?


File Info:

name: 908FD2E8B4915AD93CB0.mlw
path: /opt/CAPEv2/storage/binaries/72b22496ab2ce2e1cd225a016e28a3136a507afd035c364c4b9ef61da07be00a
crc32: 4A024EB9
md5: 908fd2e8b4915ad93cb0559f652674f6
sha1: 09fd940b64128a051c5e5d6550f031aaee7c7bfb
sha256: 72b22496ab2ce2e1cd225a016e28a3136a507afd035c364c4b9ef61da07be00a
sha512: 6500b30055469b46d27aca00383116d85bf7a49aa920a7d021b938d13c03dbab320b1a87c23fbc5726f0cdfaee7ca19796e60bcda8860e92794e08d52ebc0e3c
ssdeep: 1536:6d4QCbWQJ3CQfv8yvZx8NZ8njFLFMi9u8rxn2vcj:6d4bhCQfv8S8NZAZei95j
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1CF636327B954917BE152C5F12C25C38A392A3E7616E4EC0777C66B4929B2BE374F030B
sha3_384: 3ae705b1e1c19288eca266c98c9663c19987bd1cec55cbffcd59e79a52fb065e554b06b0b5c09852d8465c9cc0b29cc7
ep_bytes: 688c204000e8f0ffffff000068000000
timestamp: 2012-08-09 20:03:58

Version Info:

Translation: 0x0409 0x04b0
Comments: Changos Customary trimeter
CompanyName: Changos Customary trimeter
FileDescription: Changos Customary trimeter
LegalCopyright: Changos Customary trimeter
LegalTrademarks: Changos Customary trimeter
ProductName: Changos Customary trimeter
FileVersion: 0.89
ProductVersion: 0.89
InternalName: shakyamuni
OriginalFilename: shakyamuni.exe

Malware.AI.4008068588 also known as:

Elasticmalicious (high confidence)
CynetMalicious (score: 100)
FireEyeGeneric.mg.908fd2e8b4915ad9
CAT-QuickHealTrojan.Beebone.D
McAfeeVBObfus.ek
CylanceUnsafe
VIPREGen:Variant.Bulz.139911
Sangfor[MICROSOFT VISUAL BASIC V6.0]
K7AntiVirusTrojan ( 003c9fb21 )
K7GWTrojan ( 003c9fb21 )
Cybereasonmalicious.8b4915
BaiduWin32.Trojan.VBObfus.f
CyrenW32/VB.HF.gen!Eldorado
ESET-NOD32a variant of Win32/VBObfus.A
APEXMalicious
KasperskyWorm.Win32.WBNA.ipa
BitDefenderGen:Variant.Bulz.139911
NANO-AntivirusTrojan.Win32.Jorik.covkot
SUPERAntiSpywareTrojan.Agent/Gen-Vobfus
MicroWorld-eScanGen:Variant.Bulz.139911
AvastWin32:GenMalicious-OI [Trj]
Ad-AwareGen:Variant.Bulz.139911
EmsisoftGen:Variant.Bulz.139911 (B)
ComodoTrojWare.Win32.ZBot.EVX@4qkwt6
DrWebWin32.HLLW.Autoruner1.25997
TrendMicroTROJ_BEEBONE_BK083687.TOMC
McAfee-GW-EditionVBObfus.ek
SophosML/PE-A + Mal/BeeBone-D
SentinelOneStatic AI – Malicious PE
JiangminWorm/WBNA.dfba
WebrootW32.Malware.Gen
AviraTR/VB.Obfucate.tcr
MAXmalware (ai score=82)
Antiy-AVLTrojan/Generic.ASBOL.5
MicrosoftTrojanDownloader:Win32/Beebone.DJ
ZoneAlarmWorm.Win32.WBNA.ipa
GDataGen:Variant.Bulz.139911
GoogleDetected
AhnLab-V3Worm/Win.WBNA.R508426
VBA32TScope.Trojan.VB
ALYacGen:Variant.Bulz.139911
MalwarebytesMalware.AI.4008068588
TrendMicro-HouseCallTROJ_BEEBONE_BK083687.TOMC
RisingTrojan.FakeFolder!1.6503 (CLASSIC)
YandexTrojan.GenAsa!wRKngdYjbbU
IkarusTrojan.Crypt
FortinetW32/VBKrypt.C!tr
BitDefenderThetaGen:NN.ZevbaF.34592.em0@ae8R1Cdi
AVGWin32:GenMalicious-OI [Trj]
PandaTrj/Genetic.gen
CrowdStrikewin/malicious_confidence_100% (W)

How to remove Malware.AI.4008068588?

Malware.AI.4008068588 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment