Malware

Malware.AI.4222401586 information

Malware Removal

The Malware.AI.4222401586 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.4222401586 virus can do?

  • Executable code extraction
  • Attempts to connect to a dead IP:Port (4 unique times)
  • Creates RWX memory
  • Reads data out of its own binary image
  • HTTP traffic contains suspicious features which may be indicative of malware related traffic
  • Performs some HTTP requests
  • Unconventionial binary language: Russian
  • Unconventionial language used in binary resources: Russian
  • Attempts to create or modify system certificates
  • Collects information to fingerprint the system

Related domains:

z.whorecord.xyz
tttttt.me
apps.identrust.com
a.tomx.xyz

How to determine Malware.AI.4222401586?


File Info:

crc32: 55DCD206
md5: 616ae69cbf101d5b170846c3fd63a930
name: 616AE69CBF101D5B170846C3FD63A930.mlw
sha1: c91c3115e7f7f1e132e05bc303f7f29ca75830a6
sha256: be0d8928d4c9b226389bd2cfa04a6410aa9fe209aaaed24880e40b4e0a6cd7cd
sha512: a702661462bcc231061b0dd739a135adba8d56296cf6e5c8791ded32d539ba1a6d2e0d274410591576c0e1b3e73b5c7f3620ba06297395dd42022d1a5db6f9e5
ssdeep: 12288:CFPwV0BeiN7K2cQZebRiE0y4sziyXRXi0JMOfKSRdIwcYc7G+yAdtkfX4U4NjBiT:/jit8p4sOyXtJMOLvW79dQqjBiT
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: 4 23 423 4234 234 234 234 234234
InternalName: 4234 23 423 4234 234 234 234 23
FileVersion: 23 234 234 23 4234 234 23 4234 23
CompanyName: 32 42 23234 4234 234 23 423 4234 23
ProductName: 32423423 4 234234 23423 4234 23 4234 23
ProductVersion: 423 4324 234 234 234 23 423 4
FileDescription: 4234324 324 23 423 423 423 424
OriginalFilename: 23 423 2423 423 4234 23423 432
Translation: 0x0419 0x04b0

Malware.AI.4222401586 also known as:

BkavW32.AIDetect.malware1
Elasticmalicious (high confidence)
CynetMalicious (score: 100)
CylanceUnsafe
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_80% (W)
SymantecTrojan!im
ESET-NOD32a variant of Win32/GenKryptik.FHHB
APEXMalicious
AvastWin32:TrojanX-gen [Trj]
KasperskyUDS:DangerousObject.Multi.Generic
MicroWorld-eScanTrojan.GenericKD.37200069
SophosML/PE-A
BitDefenderThetaGen:NN.ZexaF.34790.qz3@aSfZY2gc
McAfee-GW-EditionArtemis!Trojan
FireEyeGeneric.mg.616ae69cbf101d5b
MicrosoftTrojan:Win32/Sabsik.FL.A!ml
ZoneAlarmUDS:DangerousObject.Multi.Generic
GDataWin32.Trojan-Stealer.Raccoon.M1C2EL
McAfeeArtemis!616AE69CBF10
MAXmalware (ai score=84)
VBA32BScope.Trojan.Cidox.02
MalwarebytesMalware.AI.4222401586
MaxSecureTrojan.Malware.300983.susgen
FortinetPossibleThreat.MU
AVGWin32:TrojanX-gen [Trj]
Paloaltogeneric.ml

How to remove Malware.AI.4222401586?

Malware.AI.4222401586 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment