Categories: Malware

Malware.AI.4265518222 (file analysis)

The Malware.AI.4265518222 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Malware.AI.4265518222 virus can do?

Unconventionial language used in binary resources: Chinese (Simplified)
The binary contains an unknown PE section name indicative of packing
Executable file is packed/obfuscated with ASPack
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Attempts to modify proxy settings
Anomalous binary characteristics
Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Malware.AI.4265518222?


File Info:
name: E60FF8A94E6D5E3BD922.mlwpath: /opt/CAPEv2/storage/binaries/d5bc9388e466f6cc020b5c32f12b133d0b1ecd3a4c8cc2e4beaca08003627ad8crc32: 515FA6FEmd5: e60ff8a94e6d5e3bd922a5d3cac6d4cesha1: 717d7a74c82fe054187e0ea17b387f6e9e7d9a0asha256: d5bc9388e466f6cc020b5c32f12b133d0b1ecd3a4c8cc2e4beaca08003627ad8sha512: 59e1b185c76b2d33114809f84cee3e317bab390b59b7f8dd84a63bcd4364157b5f9f4bcb35fb14451e9a96934e787f0f8476126919f3dfe115d06204f873d331ssdeep: 49152:eRjiXQp9Nty47bCRO4Gdk50jhKRYgGWeI+64IrnqfQdvgJ+yDZs:eRjiiDP7OE/dk5shFgG0OAvgJjDZtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1EAD5332DC5CC8E82E40621B7185E29993A156C60275A3DC5B5F636BBEFB721A10FC34Fsha3_384: df223e362bacc9530a4480b2b7fff76c1c75cfd45afadce5d2fd75ac8a84ab5772e2cb0c052899eeacf7701a77baf43dep_bytes: 60e803000000e9eb045d4555c3e80100timestamp: 2020-11-02 19:55:53
Version Info:
0: [No Data]

Malware.AI.4265518222 also known as:

Lionic	Trojan.Win32.Graftor.4!c
tehtris	Generic.Malware
MicroWorld-eScan	Gen:Variant.Graftor.871380
FireEye	Generic.mg.e60ff8a94e6d5e3b
CAT-QuickHeal	Risktool.Flystudio.18570
ALYac	Gen:Variant.Graftor.871380
Malwarebytes	Malware.AI.4265518222
VIPRE	Gen:Variant.Graftor.871380
Sangfor	Trojan.Win32.FlyStudio.Va3v
K7AntiVirus	Adware ( 005071f51 )
K7GW	Adware ( 005071f51 )
Cybereason	malicious.94e6d5
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/Packed.FlyStudio.AA potentially unwanted
APEX	Malicious
Paloalto	generic.ml
ClamAV	Win.Malware.Apost-10001460-0
BitDefender	Gen:Variant.Graftor.871380
NANO-Antivirus	Trojan.Win32.APosT.icrqvt
Avast	Win32:Malware-gen
Tencent	Malware.Win32.Gencirc.10bd13d3
Emsisoft	Gen:Variant.Graftor.871380 (B)
F-Secure	Heuristic.HEUR/AGEN.1355777
DrWeb	Trojan.PWS.Wsgame.54489
Zillya	Trojan.APosT.Win32.1752
McAfee-GW-Edition	BehavesLike.Win32.Generic.vc
Trapmine	malicious.high.ml.score
Sophos	Generic ML PUA (PUA)
SentinelOne	Static AI – Suspicious PE
GData	Win32.Application.PSE.18M7LFX
Jiangmin	Trojan.APosT.alo
Avira	HEUR/AGEN.1355777
MAX	malware (ai score=87)
Antiy-AVL	Trojan/Win32.FlyStudio.a
Xcitium	Worm.Win32.Dropper.RA@1qraug
Arcabit	Trojan.Graftor.DD4BD4
Microsoft	Trojan:Win32/Wacatac.A!ml
Cynet	Malicious (score: 100)
AhnLab-V3	Malware/Gen.RL_Reputation.R362640
McAfee	Artemis!E60FF8A94E6D
VBA32	Trojan.APosT
Cylance	unsafe
Panda	Trj/Genetic.gen
TrendMicro-HouseCall	TROJ_GEN.R002H0CBJ23
Rising	Trojan.APosT!8.E271 (TFE:5:lBEvX4nz9aB)
Yandex	Trojan.GenAsa!fW8zO9lAocw
MaxSecure	Trojan.Malware.113660775.susgen
Fortinet	Riskware/Application
AVG	Win32:Malware-gen
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_60% (D)