Categories: Malware

Malware.AI.4174443386 (file analysis)

The Malware.AI.4174443386 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Malware.AI.4174443386 virus can do?

Behavioural detection: Executable code extraction – unpacking
CAPE extracted potentially suspicious content
Drops a binary and executes it
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
Authenticode signature is invalid
Anomalous binary characteristics
Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Malware.AI.4174443386?


File Info:
name: 2CF8DD8DBAA97B8FB9DC.mlwpath: /opt/CAPEv2/storage/binaries/e5901d6c66cd16e0914672708d95983d0182273b64faaaee8484ac323fe35633crc32: 8D9F6238md5: 2cf8dd8dbaa97b8fb9dc38eb2d17f8f2sha1: 71a323a807b30d7295c91ce3537fd8213dae643bsha256: e5901d6c66cd16e0914672708d95983d0182273b64faaaee8484ac323fe35633sha512: 6cc04b80cb60bab53be381aa997601cdaddeefbfd24e7f7f59ba4727969cd6e7215ef8f9b0c0af09783a987353428d6ad8dd48529b98d79366bb0c43a7b3f352ssdeep: 3072:4MnfANNJGpZlSMirTnjPPWaeCojskegYqZHVrbcu1Rnzugc2h:4MfaNJgDUrTrYHj6KVrbL1RzW2type: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1D2045A1033E4C43AE26A163549BD4666C775B8271A21DECF7FC82EAE1FE53D187103A6sha3_384: 860dd59161ddce022b1c019e5e90fa422fd47ee2fa5899ed2d586ff19317348c546d17f2a017f167ee1a65726d52d083ep_bytes: e826600000e995feffffff35b8c24100timestamp: 2017-01-20 06:38:53
Version Info:
CompanyName: TODO: <公司名FileDescription: 1.0.0.3FileVersion: 1.0.0.3InternalName: ExeRes.exeLegalCopyright: Copyright (C) 2016OriginalFilename: ExeRes.exeProductName: TODO: ProductVersion: 1.0.0.3Translation: 0x0804 0x04b0

Malware.AI.4174443386 also known as:

Bkav	W32.Common.8CFC6E1E
Lionic	Trojan.Win32.Presenoker.4!c
MicroWorld-eScan	Dropped:Generic.Malware.SYd.4577EA75
Skyhigh	BehavesLike.Win32.Infected.ch
McAfee	Artemis!2CF8DD8DBAA9
Malwarebytes	Malware.AI.4174443386
VIPRE	Dropped:Generic.Malware.SYd.4577EA75
Sangfor	Dropper.Win32.Presenoker.V7ve
CrowdStrike	win/malicious_confidence_90% (W)
Arcabit	Generic.Malware.SYd.4577EA75
BitDefenderTheta	AI:Packer.1CBC36A71F
APEX	Malicious
BitDefender	Dropped:Generic.Malware.SYd.4577EA75
Avast	Win32:Malware-gen
Emsisoft	Dropped:Generic.Malware.SYd.4577EA75 (B)
FireEye	Generic.mg.2cf8dd8dbaa97b8f
MAX	malware (ai score=100)
Kingsoft	malware.kb.a.895
Microsoft	Trojan:Win32/Wacatac.B!ml
GData	Dropped:Generic.Malware.SYd.4577EA75
AhnLab-V3	Malware/Win32.Generic.C2704192
ALYac	Dropped:Generic.Malware.SYd.4577EA75
Cylance	unsafe
TrendMicro-HouseCall	TROJ_GEN.R002H09EE23
Rising	PUF.Presenoker!8.F608 (TFE:5:m0JWPsNBopH)
MaxSecure	Trojan.Malware.208522788.susgen
AVG	Win32:Malware-gen
Cybereason	malicious.807b30
DeepInstinct	MALICIOUS