Malware

Malware.AI.906625205 malicious file

Malware Removal

The Malware.AI.906625205 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.906625205 virus can do?

  • SetUnhandledExceptionFilter detected (possible anti-debug)
  • Yara rule detections observed from a process memory dump/dropped files/CAPE
  • Dynamic (imported) function loading detected
  • Enumerates running processes
  • Expresses interest in specific running processes
  • Reads data out of its own binary image
  • Manipulates data from or to the Recycle Bin
  • Drops a binary and executes it
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • Authenticode signature is invalid
  • Attempts to masquerade or mimic a legitimate process or file name
  • Attempts to modify Explorer settings to prevent file extensions from being displayed
  • Attempts to modify Explorer settings to prevent hidden files from being displayed

How to determine Malware.AI.906625205?


File Info:

name: 8F7FE624F5B5FA1A1ECB.mlw
path: /opt/CAPEv2/storage/binaries/a15d34e6f0160e2a4abd628491247a0497019c4f6677985b0aa1dcd19056789f
crc32: B177F7F3
md5: 8f7fe624f5b5fa1a1ecb619183662365
sha1: 375af654e14296d05317c0900da5ade3e8a848a4
sha256: a15d34e6f0160e2a4abd628491247a0497019c4f6677985b0aa1dcd19056789f
sha512: b4ffb2d65f7a263467ed96db0d1decf3981750584adb3433e2ad8dbf2ee81ec0fa9c965da29471164fd87175b17d7ef8cc300e5ed32905a99226e385dc6e5d02
ssdeep: 98304:sE30EfEWE30EfEdE30EfEHE30EfEzE30EfEyE30EfEHE30EfEEE30EfE8E30EfEe:p
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1B76613EF72A9F512D87C12B2EA830292C1B0666557FCDA7FF01075175C9F1006EAAB8D
sha3_384: 345cbde5d4439e8a134b172b479bdd0fd4c0ff82edfca31e777e219915e221a415d4152c7e84e38f6789900c50192243
ep_bytes: 60be007047008dbe00a0f8ff57eb0b90
timestamp: 2012-01-29 22:49:21

Version Info:

FileDescription:
FileVersion: 3, 3, 8, 1
CompiledScript: AutoIt v3 Script: 3, 3, 8, 1
Translation: 0x0809 0x04b0

Malware.AI.906625205 also known as:

BkavW32.AIDetect.malware2
Elasticmalicious (high confidence)
DrWebTrojan.MulDrop3.52876
MicroWorld-eScanTrojan.GenericKD.47235340
FireEyeGeneric.mg.8f7fe624f5b5fa1a
CAT-QuickHealTrojan.AutoIt.Pistolar.A
McAfeeAutoit.Dropper.gen.a
CylanceUnsafe
ZillyaTrojan.AutoIT.Win32.152520
K7AntiVirusTrojan ( 700000111 )
K7GWTrojan ( 700000111 )
CrowdStrikewin/malicious_confidence_80% (D)
BitDefenderThetaAI:Packer.05DA809615
VirITTrojan.Win32.Autoit.ES
CyrenW32/AutoIt.SG.gen!Eldorado
SymantecW32.SillyFDC
ESET-NOD32Win32/Autoit.HZ
ClamAVWin.Malware.Autoit-6981134-0
KasperskyTrojan.Win32.Autoit.blz
BitDefenderTrojan.GenericKD.47235340
NANO-AntivirusTrojan.Script.AutoIt.dbycns
AvastWin32:Malware-gen
Ad-AwareTrojan.GenericKD.47235340
EmsisoftTrojan.GenericKD.47235340 (B)
ComodoTrojWare.Win32.Autoit.n@4p0xzq
BaiduAutoIt.Worm.Agent.a
VIPREWorm.Win32.Autoit.qa (v)
McAfee-GW-EditionBehavesLike.Win32.Generic.vc
SophosML/PE-A + W32/AutoIt-QA
IkarusTrojan.Win32.Autoit
GDataTrojan.GenericKD.47235340
JiangminTrojan.MSIL.Zapchast.ag
AviraTR/Dropper.Gen
MAXmalware (ai score=80)
Antiy-AVLTrojan/Generic.ASSuf.23200
ArcabitTrojan.Generic.D2D0C10C
MicrosoftTrojan:Win32/Sabsik.FL.B!ml
CynetMalicious (score: 100)
AhnLab-V3Win-Trojan/Autoit.305824
VBA32Worm.Autoit.Rush
ALYacTrojan.GenericKD.47235340
MalwarebytesMalware.AI.906625205
APEXMalicious
RisingDropper.Pistolar/Autoit!1.A603 (CLASSIC)
eGambitUnsafe.AI_Score_99%
FortinetW32/Graftor.FU!tr
AVGWin32:Malware-gen
Cybereasonmalicious.4f5b5f
PandaTrj/Autoit.gen

How to remove Malware.AI.906625205?

Malware.AI.906625205 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment