Malware

Malware.AI.4288335521 malicious file

Malware Removal

The Malware.AI.4288335521 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.4288335521 virus can do?

  • SetUnhandledExceptionFilter detected (possible anti-debug)
  • Yara rule detections observed from a process memory dump/dropped files/CAPE
  • Dynamic (imported) function loading detected
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • Executable file is packed/obfuscated with MPRESS
  • Authenticode signature is invalid
  • Sniffs keystrokes
  • Installs an hook procedure to monitor for mouse events

How to determine Malware.AI.4288335521?


File Info:

name: 503B0BF365049BD9102D.mlw
path: /opt/CAPEv2/storage/binaries/5971a55fac59a90e0b219ee6020df3dbb85919bded50460c5b9af71f97a6918c
crc32: F4057533
md5: 503b0bf365049bd9102d0178d0421a16
sha1: cf73b77d9ec36f2c95aede9e01ff1919f53511fd
sha256: 5971a55fac59a90e0b219ee6020df3dbb85919bded50460c5b9af71f97a6918c
sha512: 0f8534b03e72b4a1d3d1bb8e5f0f234116a38a9ac6960b81dcdf8578329e04a291eef1f6577f1d2344471f6799848c7464417e62356dfa5d854fddc3eb59b070
ssdeep: 12288:/m4dSdToayYq7g3rJouVTkbaPcH4Oschn9:/3UN07IrJxVAbaPVOXhn9
type: PE32+ executable (GUI) x86-64, for MS Windows
tlsh: T12CC4F1C06F84391DC6CB653951BE2DDB50BAAF8140D7C0CAA9247C8FB7A67039927F16
sha3_384: 69a7423d8022fb259202acd9915d4829a8778202cfd6cc01db37a9cbf993ce94739198578501a94a5b80c337f143601a
ep_bytes: 57565351524150488d05de0a0000488b
timestamp: 2021-08-29 00:00:17

Version Info:

FileDescription:
FileVersion: 1.1.33.10
InternalName:
LegalCopyright:
OriginalFilename:
ProductName:
ProductVersion: 1.1.33.10
Translation: 0x0409 0x04b0

Malware.AI.4288335521 also known as:

LionicTrojan.Win32.Generic.4!c
MicroWorld-eScanTrojan.GenericKDZ.80085
FireEyeTrojan.GenericKDZ.80085
McAfeeArtemis!503B0BF36504
APEXMalicious
Paloaltogeneric.ml
BitDefenderTrojan.GenericKDZ.80085
Ad-AwareTrojan.GenericKDZ.80085
McAfee-GW-EditionBehavesLike.Win64.Benjamin.hc
EmsisoftTrojan.GenericKDZ.80085 (B)
GDataTrojan.GenericKDZ.80085
MaxSecureTrojan.Malware.300983.susgen
MAXmalware (ai score=83)
GridinsoftRansom.Win64.Sabsik.sa
MicrosoftTrojan:Win32/Sabsik.FL.B!ml
CynetMalicious (score: 100)
ALYacTrojan.GenericKDZ.80085
MalwarebytesMalware.AI.4288335521
TrendMicro-HouseCallTROJ_GEN.R002H09L921

How to remove Malware.AI.4288335521?

Malware.AI.4288335521 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment