Malware

Malware.AI.4286512134 removal guide

Malware Removal

The Malware.AI.4286512134 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.4286512134 virus can do?

  • SetUnhandledExceptionFilter detected (possible anti-debug)
  • Yara rule detections observed from a process memory dump/dropped files/CAPE
  • Creates RWX memory
  • Dynamic (imported) function loading detected
  • Reads data out of its own binary image
  • Unconventionial language used in binary resources: Russian
  • Authenticode signature is invalid
  • Creates or sets a registry key to a long series of bytes, possibly to store a binary or malware config
  • Installs itself for autorun at Windows startup

How to determine Malware.AI.4286512134?


File Info:

name: 52BA94BEDDC2D36A3ABF.mlw
path: /opt/CAPEv2/storage/binaries/33539b2ce4427b07fd30dde246eeffb38a0790a17fd6278919cfcb424378f2b6
crc32: 7DFAAF25
md5: 52ba94beddc2d36a3abf97229e53462f
sha1: b6e4e5216e227949ce6e0e9ef0a2b995d4a36a6b
sha256: 33539b2ce4427b07fd30dde246eeffb38a0790a17fd6278919cfcb424378f2b6
sha512: b2826eb10713a6e3498dbf737ad2f09f748b37b9f5c5251bf6d4abd1a52d4cde1b274199493a1f43b1220787ad718f911b7555393cb353b10ba76100f453da99
ssdeep: 98304:vFREU6p6O4Cj69hrl0PZd7CJvF8lYURF9zLvE9QxJ:3EU/ce9hlDJvjo9zjiQxJ
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T11D26332299D1C972C512407483B963A8927FF0252BDA9886FF499F3E3B75563E305BC3
sha3_384: 45637d440f6c8b9a7336782d2fb657b1dc9a62c1490bbaf4e7356e3f4fc9ba2e6db263e4d1b9945d36607b2e2dfbf425
ep_bytes: e885630000e978feffff8bff558bec56
timestamp: 2015-02-15 08:00:31

Version Info:

0: [No Data]

Malware.AI.4286512134 also known as:

BkavW32.AIDetect.malware2
LionicTrojan.Win32.Generic.4!c
Elasticmalicious (high confidence)
MicroWorld-eScanTrojan.ScriptKD.3819
FireEyeGeneric.mg.52ba94beddc2d36a
McAfeeArtemis!52BA94BEDDC2
CylanceUnsafe
CrowdStrikewin/malicious_confidence_60% (W)
Paloaltogeneric.ml
BitDefenderTrojan.ScriptKD.3819
Ad-AwareTrojan.ScriptKD.3819
McAfee-GW-EditionBehavesLike.Win32.Coinminer.rc
EmsisoftTrojan.ScriptKD.3819 (B)
IkarusTrojan.ScriptKD
GDataTrojan.ScriptKD.3819
ArcabitTrojan.ScriptKD.DEEB
MicrosoftTrojan:Win32/Wacatac.B!ml
CynetMalicious (score: 100)
ALYacTrojan.ScriptKD.3819
MalwarebytesMalware.AI.4286512134
APEXMalicious
MaxSecureTrojan.Malware.10639332.susgen
FortinetW32/Generic.JNV!tr
Cybereasonmalicious.eddc2d

How to remove Malware.AI.4286512134?

Malware.AI.4286512134 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment