What is “Malware.AI.4022477821”?

The Malware.AI.4022477821 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.4022477821 virus can do?

Sample contains Overlay data
Reads data out of its own binary image
Drops a binary and executes it
Authenticode signature is invalid
Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Malware.AI.4022477821?


File Info:
name: 72C2E2FEE7411D8DA8A6.mlw
path: /opt/CAPEv2/storage/binaries/1446a43a4f68c9e7d8ed82c5593b5793be46868f18c354360236a1753e7ccf26
crc32: F5042265
md5: 72c2e2fee7411d8da8a62f7fea3be7c3
sha1: 926eb1a9637f5efe000c72b899703956607696d1
sha256: 1446a43a4f68c9e7d8ed82c5593b5793be46868f18c354360236a1753e7ccf26
sha512: af9a0af0c72daee18df866c130153570f8b20d38332ff7089fdfaed86f70844fcd7377cb58a8afc4520f91480e054494aa3d2fd476a83544da0e340e50b0459e
ssdeep: 49152:o6JWdIQFa5LIsgpxpsIhBHwGvPk6icne9hjGD2eW7d7/:opd7F+LvQL7Qc86i9hTeWZ7/
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T10A95231777E9C036F0F27A3819B68B52DE36BC7A9F39C00E1784065E1D34A92CA26757
sha3_384: dd65cff2dfb6352486b817603592320368572e31edca82ca36d67e8e57d52eaf8b5ae380925057e52f196d8c5f4e5d85
ep_bytes: e82d640000e978feffff558bec83ec04
timestamp: 2016-01-03 11:34:27

Version Info:
0: [No Data]

Malware.AI.4022477821 also known as:

Lionic	Trojan.Win32.Generic.4!c
tehtris	Generic.Malware
FireEye	Generic.mg.72c2e2fee7411d8d
Skyhigh	BehavesLike.Win32.BadFile.tc
Malwarebytes	Malware.AI.4022477821
Sangfor	Trojan.Win32.Agent.Vgdk
Cybereason	malicious.9637f5
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
ClamAV	Win.Malware.Uztuby-6815912-0
ViRobot	Trojan.Win32.S.Agent.1974390
Emsisoft	Trojan.Downloader (A)
Trapmine	malicious.high.ml.score
Sophos	Generic ML PUA (PUA)
Ikarus	Virus.Win32.Parite
Jiangmin	Trojan-Downloader.Delf.c
Antiy-AVL	GrayWare/Win32.Wacapew
Google	Detected
McAfee	Artemis!72C2E2FEE741
DeepInstinct	MALICIOUS
VBA32	Trojan.Midgare
Cylance	unsafe
Rising	Trojan.Generic@AI.100 (RDML:bWiBOf1tgfRQV8v8ytTsUw)
SentinelOne	Static AI – Suspicious PE
MaxSecure	Trojan.Malware.216064600.susgen
Fortinet	Riskware/Beagle
AVG	Win32:WrongInf-A [Susp]
Avast	Win32:WrongInf-A [Susp]
CrowdStrike	win/grayware_confidence_60% (D)

How to remove Malware.AI.4022477821?

Malware.AI.4022477821 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X