Malware.AI.604355324 information

The Malware.AI.604355324 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.604355324 virus can do?

Dynamic (imported) function loading detected
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid

How to determine Malware.AI.604355324?


File Info:
name: 0492BBF2F14CF244F470.mlw
path: /opt/CAPEv2/storage/binaries/6abdc0d8f5ca7063acc6d5fd7f0b96c55797b679e51cdb07685222bb1b7a40bd
crc32: AA623A47
md5: 0492bbf2f14cf244f4706d696d6798ff
sha1: 060f87565a7354e8f4fac1fb865c7fb77795bd0d
sha256: 6abdc0d8f5ca7063acc6d5fd7f0b96c55797b679e51cdb07685222bb1b7a40bd
sha512: b78b97098fb32952396cde077551d4b38fbc31b5694407ab9a338b8793b63bfd2543efc213c0eacd5acf500c8b691e50f38ac3796228ef06e2abe8078c4b0d48
ssdeep: 98304:yGOsdWioQa/58W/0EKqP1Caq+kFm2gFofUIS1eV6FFEVfv:yZiLA1/0EKqci+0QUICy6cv
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1620633E8E4F52D95F5FE37B01286FEE3F1C16E441CA2997EA20275C8DB32C2AD815814
sha3_384: 27536f680594d05da73ac27ffe99ddb0688d2dc86dac373cd8d6d60ab78cc7beed48130853ecf6fb0755ada55e15e2b6
ep_bytes: ff250020400000000000000000000000
timestamp: 2010-12-09 18:58:13

Version Info:
Translation: 0x0000 0x04b0
Comments: DraconiusGo IA
CompanyName: RocketBot, Account Manager's
FileDescription: Account Manager (DraconiusGo)
FileVersion: 3.4.5.8
InternalName: DraconiusGoGUI.exe
LegalCopyright: Copyright ©  2018-2019
LegalTrademarks: Account Manager's
OriginalFilename: DraconiusGoGUI.exe
ProductName: Account Manager (DraconiusGoGUI)
ProductVersion: v3.4.5.8
Assembly Version: 3.4.5.8

Malware.AI.604355324 also known as:

MicroWorld-eScan	Trojan.GenericKD.48278198
Malwarebytes	Malware.AI.604355324
CrowdStrike	win/malicious_confidence_70% (W)
Cyren	W32/Trojan.FTQ.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Paloalto	generic.ml
Cynet	Malicious (score: 100)
Kaspersky	Trojan.Win32.Witch.drq
BitDefender	Trojan.GenericKD.48278198
Sophos	Generic ML PUA (PUA)
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	Artemis
SentinelOne	Static AI – Malicious PE
Gridinsoft	Ransom.Win32.Bladabindi.sa
GData	Trojan.GenericKD.48278198
MAX	malware (ai score=86)
Rising	Trojan.Generic/MSIL@AI.98 (RDM.MSIL:e5ruXUGs/gGhAvFAbeVQTA)

How to remove Malware.AI.604355324?

Malware.AI.604355324 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X