Malware

About “Malware.AI.4174692657” infection

Malware Removal

The Malware.AI.4174692657 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.4174692657 virus can do?

  • SetUnhandledExceptionFilter detected (possible anti-debug)
  • Creates RWX memory
  • Dynamic (imported) function loading detected
  • Enumerates running processes
  • Expresses interest in specific running processes
  • CAPE extracted potentially suspicious content
  • Authenticode signature is invalid
  • Behavioural detection: Injection (inter-process)
  • Installs itself for autorun at Windows startup
  • Creates a copy of itself
  • Anomalous binary characteristics
  • Created network traffic indicative of malicious activity

Related domains:

victorynicholas.duckdns.org
8ddf5046.duckdns.org
8ddf5046.com
8ddf5046.net
8ddf5046.org
6ca1c262.duckdns.org
6ca1c262.com
6ca1c262.net
6ca1c262.org
c8f3556c.duckdns.org
c8f3556c.com
c8f3556c.net
c8f3556c.org
bb62a384.duckdns.org
bb62a384.com
bb62a384.net

How to determine Malware.AI.4174692657?


File Info:

name: 458D1BBD1EAE01C6062A.mlw
path: /opt/CAPEv2/storage/binaries/accba71e402d761e7766340d88e51cfccc2823fc2e0b22f1723c584e85e6ee5a
crc32: 4CE96943
md5: 458d1bbd1eae01c6062ae13a309706a1
sha1: 625e5f0a451f1f8391a42f07277f69ce4c03f762
sha256: accba71e402d761e7766340d88e51cfccc2823fc2e0b22f1723c584e85e6ee5a
sha512: 66602fa734787effbbd663f0c98f559d878a54be2d198873fd1934dc26ba0a177856eaa7488885149d66664233ae116b8531080154b899e90ecdbcca5458abcc
ssdeep: 12288:ibzo+zsnzdi27YFyT0F7ii3Cg26WqfR3qioFZsd9i:ibzo+qBi2k4opr3CN6dRdUii
type: PE32+ executable (GUI) x86-64, for MS Windows
tlsh: T19FC47C5A726801FDD0A7C13CC9539A06F776780A03719BDF03A496762F636E19E3E721
sha3_384: 9f12f76b10bd58f2d573da5d7f3520185221e148ca8c71324d9bac5c431217e9c1ef8004a642c6ca7c0dcc2ab193415f
ep_bytes: 4883ec28e87b1d00004883c428e952fe
timestamp: 2021-06-15 12:18:31

Version Info:

0: [No Data]

Malware.AI.4174692657 also known as:

LionicTrojan.Win32.Scar.4!c
Elasticmalicious (high confidence)
DrWebTrojan.Inject4.20466
MicroWorld-eScanGen:Variant.Razy.885417
FireEyeGeneric.mg.458d1bbd1eae01c6
McAfeeGenericRXAA-AA!458D1BBD1EAE
CylanceUnsafe
ZillyaTrojan.GenKryptik.Win64.1515
SangforTrojan.Win32.Save.a
K7AntiVirusTrojan ( 0057e8ec1 )
AlibabaTrojan:Win32/GenKryptik.e2e3f987
K7GWTrojan ( 0057e8ec1 )
Cybereasonmalicious.a451f1
SymantecTrojan.Gen.MBT
ESET-NOD32a variant of Win64/GenKryptik.FGOQ
APEXMalicious
Paloaltogeneric.ml
BitDefenderGen:Variant.Razy.885417
NANO-AntivirusTrojan.Win64.Scar.jibhpd
AvastWin64:CrypterX-gen [Trj]
Ad-AwareGen:Variant.Razy.885417
EmsisoftGen:Variant.Razy.885417 (B)
TrendMicroTROJ_GEN.R002C0WKQ21
McAfee-GW-EditionBehavesLike.Win64.Injector.hh
SophosMal/Generic-S
IkarusTrojan.Win64.Krypt
GDataGen:Variant.Razy.885417
JiangminTrojan.Scar.tch
AviraHEUR/AGEN.1143590
Antiy-AVLTrojan/Generic.ASMalwS.33B2216
GridinsoftRansom.Win64.Sabsik.sa
ViRobotTrojan.Win32.Z.Scar.561588
MicrosoftTrojan:Win32/Wacatac.B!ml
CynetMalicious (score: 99)
AhnLab-V3Trojan/Win.Generic.R455324
ALYacGen:Variant.Razy.885417
MAXmalware (ai score=88)
VBA32Trojan.Scar
MalwarebytesMalware.AI.4174692657
TrendMicro-HouseCallTROJ_GEN.R002C0WKQ21
TencentMalware.Win32.Gencirc.11d926e3
YandexTrojan.Scar!GUqce4fP1KM
SentinelOneStatic AI – Malicious PE
eGambitUnsafe.AI_Score_91%
FortinetW64/GenKryptik.FGOQ!tr
AVGWin64:CrypterX-gen [Trj]
PandaTrj/CI.A
CrowdStrikewin/malicious_confidence_60% (W)
MaxSecureTrojan.Malware.300983.susgen

How to remove Malware.AI.4174692657?

Malware.AI.4174692657 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment