Malware

Malware.AI.4137838460 (file analysis)

Malware Removal

The Malware.AI.4137838460 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.4137838460 virus can do?

  • Executable code extraction
  • Injection (inter-process)
  • Injection (Process Hollowing)
  • Creates RWX memory
  • A process attempted to delay the analysis task.
  • Reads data out of its own binary image
  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • Attempts to modify desktop wallpaper
  • Executed a process and injected code into it, probably while unpacking
  • Exhibits behavior characteristic of Cerber ransomware
  • Attempts to execute a binary from a dead or sinkholed URL
  • Attempts to modify proxy settings
  • Attempts to access Bitcoin/ALTCoin wallets
  • Collects information to fingerprint the system

How to determine Malware.AI.4137838460?


File Info:

crc32: C2DA0FD6
md5: ae41a6a8ceb235164fd104760ed7ad2b
name: AE41A6A8CEB235164FD104760ED7AD2B.mlw
sha1: 221e722a6ec48625fa20150763d0a7f754f655d4
sha256: 58b9aeaf469822cdadf760df2f5962ff725f887f4bfe1ff2be55aaf8220f4fc1
sha512: 02beb45ef7c3ef0efd31c868c34ffc250206f1ecc10c13cebbb20c6d912e8ffc58969962d0291c87027d2d33e96b5e7651542636ad92b1baa7cc0f3884198d2a
ssdeep: 6144:+y1I8Zz8AlT7R+doErwe9ls1bHdcd4J1y+TxpqBmVGIt45KZVL:+yGwr4oEr19mJOmQNI
type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

Version Info:

0: [No Data]

Malware.AI.4137838460 also known as:

BkavW32.AIDetect.malware2
Elasticmalicious (high confidence)
MicroWorld-eScanTrojan.Ransom.Cerber.KU
FireEyeGeneric.mg.ae41a6a8ceb23516
McAfeeRansomware-FMEE!AE41A6A8CEB2
CylanceUnsafe
ZillyaTrojan.Zerber.Win32.4839
SangforTrojan.Win32.Save.a
K7AntiVirusTrojan ( 00507e701 )
BitDefenderTrojan.Ransom.Cerber.KU
K7GWTrojan ( 00507e701 )
CrowdStrikewin/malicious_confidence_100% (W)
BitDefenderThetaGen:NN.ZexaF.34608.tmZ@aOzI6efm
CyrenW32/S-00a0c8e0!Eldorado
SymantecML.Attribute.HighConfidence
APEXMalicious
AvastWin32:RansomX-gen [Ransom]
ClamAVWin.Ransomware.Cerber-9779304-0
KasperskyTrojan-Ransom.Win32.Zerber.gctf
AlibabaRansom:Win32/Zerber.0d8ec27b
NANO-AntivirusTrojan.Win32.Zerber.icbenx
AegisLabTrojan.Win32.Cerber.4!c
RisingRansom.Cerber!8.3058 (CLOUD)
Ad-AwareTrojan.Ransom.Cerber.KU
EmsisoftTrojan.Ransom.Cerber.KU (B)
ComodoMalware@#15duopbw6u338
DrWebTrojan.PWS.Panda.11620
VIPRETrojan.Win32.Generic!BT
TrendMicroMal_Cerber-24
McAfee-GW-EditionBehavesLike.Win32.RansomGandCrab.fc
SophosMal/Generic-R + Mal/Cerber-V
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.108908310.susgen
AviraHEUR/AGEN.1127103
MicrosoftRansom:Win32/Cerber
ArcabitTrojan.Ransom.Cerber.KU
AhnLab-V3Trojan/Win32.Cerber.C1833175
ZoneAlarmTrojan-Ransom.Win32.Zerber.gctf
GDataTrojan.Ransom.Cerber.KU
CynetMalicious (score: 100)
ESET-NOD32a variant of Win32/Injector.DMXF
VBA32TrojanRansom.Zerber
MAXmalware (ai score=100)
MalwarebytesMalware.AI.4137838460
PandaTrj/CI.A
TrendMicro-HouseCallMal_Cerber-24
TencentMalware.Win32.Gencirc.10bb75d2
YandexTrojan.Zerber!JNTXTLjxoJE
IkarusTrojan.Win32.Injector
FortinetW32/Injector.DMCL!tr
AVGWin32:RansomX-gen [Ransom]
Cybereasonmalicious.8ceb23
Paloaltogeneric.ml
Qihoo-360Win32/Ransom.Cerber.HxIBGQ8A

How to remove Malware.AI.4137838460?

Malware.AI.4137838460 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment