Malware

Malware.AI.4152309491 malicious file

Malware Removal

The Malware.AI.4152309491 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.4152309491 virus can do?

  • SetUnhandledExceptionFilter detected (possible anti-debug)
  • Dynamic (imported) function loading detected
  • Reads data out of its own binary image
  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid
  • Harvests cookies for information gathering

How to determine Malware.AI.4152309491?


File Info:

name: 53AAEF58FBD71D2DE5C3.mlw
path: /opt/CAPEv2/storage/binaries/a49809eecf7545aacdf4e3acaed54ab2d97fd268333036b2e7579cee8bb352ce
crc32: 24CBA846
md5: 53aaef58fbd71d2de5c3160e0b87339a
sha1: 8eaf799084f32cafd6e92a4e56a481c8e2143940
sha256: a49809eecf7545aacdf4e3acaed54ab2d97fd268333036b2e7579cee8bb352ce
sha512: dcc468f486c48f41089c68e94a2f55421817d93b808b56c5862273e22662074056085417f18af5ec4f834e2c22aea8db7a17129795f4a151f17b1f65579e8e6b
ssdeep: 24576:YOfNkuu6oLs8fpgVlCjNdhJ4eCckIIYkQ3Ia9znaWwk2UP1o9b8+m7TS6JuXGXiM:H6mOhWeCckIIYkQ6Fk2Ge8R7Tn4XGKeN
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T19F65224279C185B1E5B1183915F8A7706E3CBE206B39DACF93C4665C5F702C1AE3AB63
sha3_384: 5a46d9082b44de2c7e949880b9e00058fad164ea0e33692563637bdfa18eb3bc7adda0136c37312f2d933817609a46ca
ep_bytes: e808050000e988feffff3b0d58254300
timestamp: 2020-12-01 18:01:01

Version Info:

0: [No Data]

Malware.AI.4152309491 also known as:

BkavW32.AIDetect.malware2
LionicTrojan.Win32.Chapak.trPP
Elasticmalicious (high confidence)
FireEyeGeneric.mg.53aaef58fbd71d2d
McAfeeArtemis!53AAEF58FBD7
APEXMalicious
AvastWin32:Trojan-gen
SophosGeneric ML PUA (PUA)
McAfee-GW-EditionBehavesLike.Win32.Generic.tc
SentinelOneStatic AI – Malicious PE
GridinsoftRansom.Win32.Sabsik.sa
MicrosoftTrojan:Win32/Sabsik.FL.B!ml
CynetMalicious (score: 100)
MalwarebytesMalware.AI.4152309491
eGambitUnsafe.AI_Score_99%
AVGWin32:Trojan-gen
Cybereasonmalicious.084f32

How to remove Malware.AI.4152309491?

Malware.AI.4152309491 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment