Malware

Malware.AI.740433400 malicious file

Malware Removal

The Malware.AI.740433400 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.740433400 virus can do?

  • Uses Windows utilities for basic functionality
  • HTTPS urls from behavior.
  • CAPE extracted potentially suspicious content
  • Drops a binary and executes it
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Uses Windows utilities to create a scheduled task
  • Attempts to identify installed AV products by installation directory
  • Attempts to modify proxy settings
  • Appears to use command line obfuscation
  • Deletes executed files from disk
  • Uses suspicious command line tools or Windows utilities

How to determine Malware.AI.740433400?


File Info:

name: 5FF992C23E9C97B52949.mlw
path: /opt/CAPEv2/storage/binaries/2c5bf901e9a7b096f8ec4c58fcc150a017e8577e53a62ece287c9b3d2c4f6f36
crc32: 16960B43
md5: 5ff992c23e9c97b52949224647d03b62
sha1: 08bd944924d4863395d32eb91f3a20d9e2f2f828
sha256: 2c5bf901e9a7b096f8ec4c58fcc150a017e8577e53a62ece287c9b3d2c4f6f36
sha512: 50f3ca4692545e0474198ae06110b8df8b5c9f3d45a31c132f788ab9ade3e3415204db443e42b76ef3dd61a3ee738cb09baa7c2e40ab8496ef6deff74c624810
ssdeep: 6144:Kyy+bnr+6p0yN90QEX1qJv+ig0Uqra5GvF:eMryy90KPhrhF
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T17A34D052E7C94073D8B527B01CF603C30B3ABDA1A974836B2785695E0CB36D4A93677B
sha3_384: 274856f354d8058336d0bcfa8a47d74c000a77a49b9a161d267dddafc8d3a12e85aac4b4f57d41e235ad5c48970a40b7
ep_bytes: e8f0060000e9000000006a5868b87240
timestamp: 2022-05-24 22:49:06

Version Info:

CompanyName: Microsoft Corporation
FileDescription: Win32 Cabinet Self-Extractor
FileVersion: 11.00.17763.1 (WinBuild.160101.0800)
InternalName: Wextract
LegalCopyright: © Microsoft Corporation. All rights reserved.
OriginalFilename: WEXTRACT.EXE .MUI
ProductName: Internet Explorer
ProductVersion: 11.00.17763.1
Translation: 0x0409 0x04b0

Malware.AI.740433400 also known as:

BkavW32.AIDetectMalware
LionicTrojan.Win32.Agent.Y!c
MicroWorld-eScanGen:Heur.Crifi.1
ClamAVWin.Malware.Doina-10001799-0
FireEyeGen:Heur.Crifi.1
CAT-QuickHealTrojan.YakbeexMSIL.ZZ4
ALYacGen:Heur.Crifi.1
MalwarebytesMalware.AI.740433400
ZillyaTrojan.Agent.Win32.3609531
SangforSuspicious.Win32.Save.a
K7AntiVirusTrojan ( 005a38161 )
AlibabaTrojanSpy:Win32/Stealer.f34c397a
K7GWTrojan ( 005a38161 )
Cybereasonmalicious.924d48
ArcabitTrojan.Crifi.1
VirITTrojan.Win32.MSIL.EY
CyrenW32/Kryptik.JKR.gen!Eldorado
SymantecML.Attribute.HighConfidence
Elasticmalicious (high confidence)
ESET-NOD32multiple detections
APEXMalicious
CynetMalicious (score: 99)
KasperskyUDS:Trojan.MSIL.Agent.gen
BitDefenderGen:Heur.Crifi.1
NANO-AntivirusTrojan.Win32.Disabler.juypyq
SUPERAntiSpywareTrojan.Agent/Gen-Downloader
AvastWin32:TrojanX-gen [Trj]
TencentWin32.Trojan-Spy.Stealer.Twhl
SophosTroj/PlugX-EC
F-SecureTrojan.TR/ATRAPS.Gen
DrWebTrojan.Siggen19.32857
VIPREGen:Heur.Crifi.1
TrendMicroTROJ_FRS.0NA103HR23
McAfee-GW-EditionBehavesLike.Win32.Generic.dc
EmsisoftGen:Heur.Crifi.1 (B)
SentinelOneStatic AI – Malicious SFX
JiangminTrojanDownloader.Deyma.aqt
AviraTR/AD.Nekark.zvabt
Antiy-AVLTrojan[Downloader]/Win32.Amadey
MicrosoftTrojan:MSIL/plugx!atmn
ZoneAlarmHEUR:Trojan.MSIL.Agent.gen
GDataWin32.Trojan-Downloader.Amadey.D
GoogleDetected
AhnLab-V3Trojan/Win.Generic.R593658
Acronissuspicious
McAfeeTrojan-FVOI!5FF992C23E9C
MAXmalware (ai score=87)
Cylanceunsafe
PandaTrj/Chgt.AD
RisingDownloader.Amadey!8.125AC (TFE:5:RZlUpeBEt9L)
YandexTrojan.Disabler!G6z7qDxyklM
IkarusTrojan.Spy.Stealer
FortinetMSIL/Disabler.DR!tr
AVGWin32:TrojanX-gen [Trj]
DeepInstinctMALICIOUS
CrowdStrikewin/malicious_confidence_100% (W)

How to remove Malware.AI.740433400?

Malware.AI.740433400 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment