Malware

How to remove “Malware.AI.4230423224”?

Malware Removal

The Malware.AI.4230423224 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.4230423224 virus can do?

  • Performs HTTP requests potentially not found in PCAP.
  • Drops a binary and executes it
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Attempts to modify proxy settings
  • Harvests cookies for information gathering
  • Anomalous binary characteristics
  • Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Malware.AI.4230423224?


File Info:

name: 7B4AC6D2C749765072BC.mlw
path: /opt/CAPEv2/storage/binaries/580aa9c4d27b62ae84f81c6f311fbecbec9a6f362ce23425b28e49e870c1b35e
crc32: 9B821FFB
md5: 7b4ac6d2c749765072bc185724bbc75c
sha1: 4b8719541f6ed476c36136c8b0c21923868d0660
sha256: 580aa9c4d27b62ae84f81c6f311fbecbec9a6f362ce23425b28e49e870c1b35e
sha512: 1e053cf463ab5d3a100492ccb25e237aed29f939b790a67826f149b77a8061dc3d5bfafd961c5ba1757d7f6d9806e3a824c8e422816a5bfe8fdb6f7fd10e9ecf
ssdeep: 98304:f2cPK8zFb4pZlDJs82EYKFZhMI8CbT/jxllWM3WXy:+CK4FMpZlo+gCbTbNW/i
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T129160203A791C222FFA682B36E536B02577A6A154153927F329C0D6FFF705F10AAC257
sha3_384: 566a994e26fcf0fb736579fa02f6b482510a2858947062d79923f369a5a6da0edd606030a1b2f7a4289c69cbcb233ca6
ep_bytes: e8c8d00000e97ffeffffcccccccccccc
timestamp: 2023-01-26 19:36:47

Version Info:

FileVersion: 4.7.3.0
Comments: http://www.autoitscript.com/autoit3/
FileDescription: Metin2 Tools | Metin2 Bot
ProductName: M2 Tools
ProductVersion: 4.7
LegalCopyright: Elitepvpers and Chugy
Translation: 0x0809 0x04b0

Malware.AI.4230423224 also known as:

BkavW32.AIDetectMalware
LionicTrojan.Win32.Badur.4!c
AVGWin32:Malware-gen
MicroWorld-eScanTrojan.GenericKD.66033236
FireEyeTrojan.GenericKD.66033236
ALYacTrojan.GenericKD.66033236
MalwarebytesMalware.AI.4230423224
SangforTrojan.Win32.Agent.Vdy5
K7AntiVirusTrojan ( 700000111 )
K7GWTrojan ( 700000111 )
CyrenW32/ABRisk.AOMD-4038
APEXMalicious
Paloaltogeneric.ml
KasperskyUDS:Trojan.Win32.Badur.fe
BitDefenderTrojan.GenericKD.66033236
AvastWin32:Malware-gen
EmsisoftTrojan.GenericKD.66033236 (B)
VIPRETrojan.GenericKD.66033236
McAfee-GW-EditionBehavesLike.Win32.Generic.rc
SophosMal/Generic-S (PUA)
GDataTrojan.GenericKD.66033236
MAXmalware (ai score=86)
ArcabitTrojan.Generic.D3EF9654
ZoneAlarmUDS:Trojan.Win32.Badur.fe
MicrosoftTrojan:Win32/Wacatac.B!ml
GoogleDetected
McAfeeArtemis!7B4AC6D2C749
VBA32Trojan-Downloader.Autoit.gen
Cylanceunsafe
TrendMicro-HouseCallTROJ_GEN.R03BH09CN23
MaxSecureTrojan.Malware.203616024.susgen
FortinetMalicious_Behavior.SB
DeepInstinctMALICIOUS
CrowdStrikewin/grayware_confidence_70% (D)

How to remove Malware.AI.4230423224?

Malware.AI.4230423224 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment