Backdoor.Win32.Agent.myuhae malicious file

The Backdoor.Win32.Agent.myuhae is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Backdoor.Win32.Agent.myuhae virus can do?

• Yara rule detections observed from a process memory dump/dropped files/CAPE
• Dynamic (imported) function loading detected
• The binary contains an unknown PE section name indicative of packing
• The binary likely contains encrypted or compressed data.
• The executable is likely packed with VMProtect
• Authenticode signature is invalid

How to determine Backdoor.Win32.Agent.myuhae?

File Info:
name: EB686CF9F8F82E5EBBD2.mlw
path: /opt/CAPEv2/storage/binaries/73733923fa08a50b3efa408393f6b140e3145d3b55e87b7bf87b7d3de2c1d4c2
crc32: FDAE108D
md5: eb686cf9f8f82e5ebbd23a32dbc118db
sha1: 73e326e7f01d0cd3e30c35314ad6ff00507c7660
sha256: 73733923fa08a50b3efa408393f6b140e3145d3b55e87b7bf87b7d3de2c1d4c2
sha512: 0dc65572134744aa5f3b4a578bcfd94506938cd4db92b6c62ac310b3785b0ae0653b02231126eab5b12751221f829f93520cc2045bc671f1ad776a06ec7de079
ssdeep: 98304:4cHLFxqi/KkuuWqXjCFrTRaN2DXTxgqgwSiMY98PHwOc63RxrEZl7vX:4crHK9bVaknxgqghiMY9EwOcYeN
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T1C55623F312B2014AD5E9DC3D863BBCB570FB12774B42A87855AFACC525124B9BA03D63
sha3_384: 18bbd461fff0fa6ecd29d61248cde9938711ceabb9a1960bb6f1b2d63d9a26affb77ffb9f4592b707774bab03045ae58
ep_bytes: 68c6208c1ee81b3f3300c1c803e9cbdb
timestamp: 2022-02-04 10:06:57

Version Info:
0: [No Data]

Backdoor.Win32.Agent.myuhae also known as:

How to remove Backdoor.Win32.Agent.myuhae?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.