Malware

Malware.AI.4058249903 malicious file

Malware Removal

The Malware.AI.4058249903 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.4058249903 virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • SetUnhandledExceptionFilter detected (possible anti-debug)
  • Yara rule detections observed from a process memory dump/dropped files/CAPE
  • Presents an Authenticode digital signature
  • Creates RWX memory
  • Dynamic (imported) function loading detected
  • CAPE extracted potentially suspicious content
  • Authenticode signature is invalid
  • CAPE detected the Raccoon malware family
  • Collects information to fingerprint the system
  • Anomalous binary characteristics

How to determine Malware.AI.4058249903?


File Info:

name: 99A06DE14DE25D301E52.mlw
path: /opt/CAPEv2/storage/binaries/77573bce83c8df7e1ac68b8d546d078ec1be044f7f0fed828d76a94381eb5867
crc32: 5E65A466
md5: 99a06de14de25d301e527e34fa7953d6
sha1: 80318275d83eecc4de350e524b938745b8f01e0b
sha256: 77573bce83c8df7e1ac68b8d546d078ec1be044f7f0fed828d76a94381eb5867
sha512: 913ea0f4ddbba0f4880f413d09392705cde866814e0a0c4a5c677c6ff04281ce7cbc7b8b695d65fabeecf1b721fe622aa0b24a2e98bd5492d27ccd22c5d228bf
ssdeep: 24576:mvr1BOEWkp8bQoL0hHcp81LHyJqHtMzI8LU79e3q2QCo2EzMvPoW:g1Bzp8M4TpgH83qcoIvH
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T15185AEAAFA44D966D1D88232C873CAF81518FC66C4E516533DE13F0FF8713D25A6AD0A
sha3_384: 2513dc9ed88cb5b8e7c0f8f4d9ac9a02b5936d807174f012be4d2d3e412f6302e679ace2160b15746db3d7f6031a290d
ep_bytes: 8bc8680000000068439241008bc0fc90
timestamp: 1970-01-01 00:00:00

Version Info:

FileVersion: 4, 6, 4, 1
CompanyName: Star Force
InternalName: Comediant
PrivateBuild: Nearctic
Translation: 0x0409 0x04e4

Malware.AI.4058249903 also known as:

LionicTrojan.Win32.Generic.4!c
Elasticmalicious (high confidence)
MicroWorld-eScanTrojan.GenericKD.48332008
FireEyeGeneric.mg.99a06de14de25d30
ALYacTrojan.GenericKD.48332008
SangforSuspicious.Win32.Attribute.HighConfidence
CrowdStrikewin/malicious_confidence_60% (W)
K7GWTrojan ( 0058e5bb1 )
K7AntiVirusTrojan ( 0058e5bb1 )
ArcabitTrojan.Generic.D2E17CE8
CyrenW32/Kryptik.FSK.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Generik.BUDFMKX
APEXMalicious
Paloaltogeneric.ml
CynetMalicious (score: 100)
KasperskyTrojan.Win32.Injuke.fisu
BitDefenderTrojan.GenericKD.48332008
AvastWin32:Malware-gen
Ad-AwareTrojan.GenericKD.48332008
EmsisoftTrojan.GenericKD.48332008 (B)
McAfee-GW-EditionArtemis
SophosMal/Generic-S
IkarusTrojan.SuspectCRC
GridinsoftRansom.Win32.Sabsik.sa
MicrosoftTrojan:Win32/Casur.A!cl
ZoneAlarmTrojan.Win32.Injuke.fisu
GDataTrojan.GenericKD.48332008
Acronissuspicious
McAfeeArtemis!99A06DE14DE2
MAXmalware (ai score=81)
MalwarebytesMalware.AI.4058249903
RisingTrojan.Undefined!8.1327C (CLOUD)
SentinelOneStatic AI – Malicious PE
FortinetMalicious_Behavior.SB
BitDefenderThetaGen:NN.ZexaF.34212.Sr1@a8Md22ai
AVGWin32:Malware-gen
PandaTrj/GdSda.A

How to remove Malware.AI.4058249903?

Malware.AI.4058249903 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment