Malware

Malware.AI.4214351147 removal tips

Malware Removal

The Malware.AI.4214351147 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.4214351147 virus can do?

  • SetUnhandledExceptionFilter detected (possible anti-debug)
  • Yara rule detections observed from a process memory dump/dropped files/CAPE
  • Creates RWX memory
  • Anomalous file deletion behavior detected (10+)
  • Guard pages use detected – possible anti-debugging.
  • Dynamic (imported) function loading detected
  • Reads data out of its own binary image
  • A process created a hidden window
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • A scripting utility was executed
  • Uses Windows utilities for basic functionality
  • Uses Windows utilities for basic functionality
  • A script process created a new process
  • Creates a hidden or system file
  • Attempts to execute suspicious powershell command arguments

How to determine Malware.AI.4214351147?


File Info:

name: 5BF92AF634F0C7F46B00.mlw
path: /opt/CAPEv2/storage/binaries/9cbfe1c7977ecbf1e9bc39cbdd28310ef197686da409bf18c341f8f4395dc4ed
crc32: 3B15E3CA
md5: 5bf92af634f0c7f46b00f97f7aea0ebd
sha1: 17bea507b92d007b92075d79fbf268a354473532
sha256: 9cbfe1c7977ecbf1e9bc39cbdd28310ef197686da409bf18c341f8f4395dc4ed
sha512: d40c40b83593395c5bd8857209a10df5da7c1e19834baf1cbca35ff31a6463c3feeadf0ee9fb1b8c3f85015801707256853fdbb2760ce11df4b083d5db3b0165
ssdeep: 393216:X5zikB+LIIUcqVujQX8iQ7OC2eo7OMAyfanalgDXVO:JrBJpkjQXy7OuvMZanalgDX
type: PE32+ executable (GUI) x86-64, for MS Windows
tlsh: T1ACD6235533A85299FE77E077CB52C647C7B1B88A42778B2F01E41AB61F736701A2E321
sha3_384: 3810c1992a2ba11a666920b3151c54d751daa292bb827e4260b4a3d639abc4c231ae697479dff28e73be8f8aa627bcf6
ep_bytes: 4883ec28e8bfb300004883c428e936fe
timestamp: 2021-09-06 18:17:58

Version Info:

Translation: 0x0809 0x04b0

Malware.AI.4214351147 also known as:

Elasticmalicious (high confidence)
DrWebBAT.Hosts.41
MicroWorld-eScanAIT:Trojan.Nymeria.4564
Cybereasonmalicious.634f0c
CyrenW64/Trojan.YHUF-5132
ESET-NOD32multiple detections
APEXMalicious
KasperskyTrojan.Win64.Miner.anoc
BitDefenderAIT:Trojan.Nymeria.4564
NANO-AntivirusTrojan.Win64.Ulise.iupdlj
AvastVBS:Miner-G [Trj]
Ad-AwareAIT:Trojan.Nymeria.4564
EmsisoftAIT:Trojan.Nymeria.4564 (B)
F-SecurePotentialRisk.PUA/CoinMiner.Gen
TrendMicroTROJ_FRS.0NA103K821
McAfee-GW-EditionBehavesLike.Win64.Generic.rc
FireEyeGeneric.mg.5bf92af634f0c7f4
SophosGeneric ML PUA (PUA)
GDataHeur.BZC.ONG.Pantera.14.72CCF0D4
AviraPUA/CoinMiner.Gen
Antiy-AVLTrojan/Generic.ASMalwS.310062A
ArcabitAIT:Trojan.Nymeria.D11D4
MicrosoftTrojan:Win64/UACBypassExp.A!MTB
CynetMalicious (score: 99)
AhnLab-V3Trojan/Win32.RL_Miner.R325412
ALYacHeur.BZC.ONG.Pantera.14.72CCF0D4
MAXmalware (ai score=88)
MalwarebytesMalware.AI.4214351147
TrendMicro-HouseCallTROJ_FRS.0NA103K821
MaxSecureTrojan.Malware.300983.susgen
FortinetW64/UACMe.O!tr
AVGVBS:Miner-G [Trj]

How to remove Malware.AI.4214351147?

Malware.AI.4214351147 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment