Malware

About “Malware.AI.4181479621” infection

Malware Removal

The Malware.AI.4181479621 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.4181479621 virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • CAPE extracted potentially suspicious content
  • Drops a binary and executes it
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • Authenticode signature is invalid
  • Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Malware.AI.4181479621?


File Info:

name: CFE6DBFE49AA10C19FFB.mlw
path: /opt/CAPEv2/storage/binaries/32080a4895be9c42ca185b6894aaca2ca03e015c8c37fff777025f6f4cb72612
crc32: 7D6EDAF1
md5: cfe6dbfe49aa10c19ffbb7413e09f41f
sha1: 0dde0d7e6c3025b328b320635f87bec269b40612
sha256: 32080a4895be9c42ca185b6894aaca2ca03e015c8c37fff777025f6f4cb72612
sha512: 88c85fa13a8d9e7b421fb5b16ce53bf68427db830acdf5e8d6fe616fa02ab06ac05a546aaa5b5c985d4f81ad17dcb1b7c0211dcc17547dbf11f6d4bd59c3c5ff
ssdeep: 24576:PynCR6emB3ONs/PM6cioB69qFHrtGvGZQFeR6NbndBc2k:PygPcONK0hk6iGmNbnXc
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T17925237875B1AC04F0628AF41E6EEF7856F1BD486994066AF0F3BE9FF8738924559003
sha3_384: 408e1b4d76619dd6d5ecd4a853e4a2b244177e0489c547725c32d37466ce74e76bd0fa7e987b9363c68c8632a405be2e
ep_bytes: 60be00c058008dbe0050e7ff5789e58d
timestamp: 2022-06-05 02:38:23

Version Info:

FileDescription:
FileVersion: 1.1.34.03
InternalName:
LegalCopyright:
OriginalFilename:
ProductName:
ProductVersion: 1.1.34.03
Translation: 0x0409 0x04b0

Malware.AI.4181479621 also known as:

BkavW32.AIDetectMalware
CAT-QuickHealTrojan.IgenericRI.S25215966
SkyhighBehavesLike.Win32.BadFile.fc
MalwarebytesMalware.AI.4181479621
CrowdStrikewin/malicious_confidence_70% (D)
Elasticmalicious (moderate confidence)
CynetMalicious (score: 100)
APEXMalicious
NANO-AntivirusTrojan.Win32.Hotkeychick.jvfpmh
Trapminesuspicious.low.ml.score
FireEyeGeneric.mg.cfe6dbfe49aa10c1
SentinelOneStatic AI – Malicious PE
JiangminTrojanSpy.Stealer.aczn
Antiy-AVLTrojan/Win32.SGeneric
AhnLab-V3Malware/Win32.Generic.C4057916
McAfeeArtemis!CFE6DBFE49AA
VBA32Trojan.Chifrax

How to remove Malware.AI.4181479621?

Malware.AI.4181479621 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment