Malware

Python/Agent.AKS removal tips

Malware Removal

The Python/Agent.AKS is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Python/Agent.AKS virus can do?

  • Sample contains Overlay data
  • Reads data out of its own binary image
  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid
  • CAPE detected the PyInstaller malware family
  • Yara detections observed in process dumps, payloads or dropped files

How to determine Python/Agent.AKS?


File Info:

name: 26DFBEED3690535DFC58.mlw
path: /opt/CAPEv2/storage/binaries/dd3f30e2b98a271aaafc5e68f47688db9deea0079f8ad926f7d52c73e8746e3e
crc32: 1E23B5CA
md5: 26dfbeed3690535dfc5803c4e0dfef78
sha1: 28e4caf30123094f7ccbba29e87b2a6987f02cf5
sha256: dd3f30e2b98a271aaafc5e68f47688db9deea0079f8ad926f7d52c73e8746e3e
sha512: f8247372cec67ec8c66b134be2936d6f8d249d928106aa0e9e7af5247a7dc778f16c7cf3425f05fae9e35d6008b5dd8214c18a9e33f38f3d9fec79e8275e7f41
ssdeep: 196608:qaQm1k/w1W903eV4QS993iObMGuLmeQ1Zc:R2/mW+eGQ493iObyL5Qc
type: PE32+ executable (console) x86-64, for MS Windows
tlsh: T19B663354A3F50DF6FC26813E8152C269E772742213B8E64B93E68D533F232A3593AF45
sha3_384: 64209d0b824d5169d06bbc79c5d8439302c6623bb023934a4a568452fc6b6501e7bb96741af13804bac625574b119ed7
ep_bytes: 4883ec28e8670200004883c428e96afe
timestamp: 2023-10-24 07:53:27

Version Info:

0: [No Data]

Python/Agent.AKS also known as:

BkavW64.AIDetectMalware
Elasticmalicious (moderate confidence)
SkyhighBehavesLike.Win64.Agent.vc
AlibabaTrojan:Python/Agent.b68e453f
ESET-NOD32Python/Agent.AKS
APEXMalicious
Paloaltogeneric.ml
SentinelOneStatic AI – Suspicious PE
JiangminTrojanSpy.Agent.afvo
GoogleDetected
VaristW64/Trojan.BREC-5218
FortinetW32/Agent.AKS!tr
DeepInstinctMALICIOUS
alibabacloudTrojan:Python/Agent.AKS

How to remove Python/Agent.AKS?

Python/Agent.AKS removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment