What is “Doina.69854”?

The Doina.69854 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Doina.69854 virus can do?

Sample contains Overlay data
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine Doina.69854?


File Info:
name: 75EC2DE8DD3D1BBCF2A9.mlw
path: /opt/CAPEv2/storage/binaries/7dfd58f219db1585804e23e066b1b840e6078ad7419c4c17058c53c4b84e8287
crc32: 5902B5E9
md5: 75ec2de8dd3d1bbcf2a96d6b1e11b202
sha1: 47161a0dca6e8716f71f29fe0bf3c6270d910065
sha256: 7dfd58f219db1585804e23e066b1b840e6078ad7419c4c17058c53c4b84e8287
sha512: 0680d3f6846054f90ca5eee1e4fd263e5ecc6872387ced400f6e646956fb85a113260a7a67b695a222a7497009c99220235bf42b8276b0350f63e35550b57cb3
ssdeep: 768:W0WswN3KO2omI7PP3lLuzZPKqocjIgapoRZ:U5N3KqmI7PP3lLuBZocFaK
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
tlsh: T1FAE2B6597E444CFBDA10173994E6C77A2A7CF091C6234B62F650B7308B337E1219B26E
sha3_384: b923291d0e20b11cb780bde3c25d8ffd9c01c27f19b21c0f81b08bebccde547130eeb400851ff1a2c33909ab00957bc5
ep_bytes: 57565383ec108b5c24248b7424208b7c
timestamp: 2024-02-09 07:33:07

Version Info:
0: [No Data]

Doina.69854 also known as:

Lionic	Trojan.Win32.Agent.Y!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Doina.69854
FireEye	Gen:Variant.Doina.69854
Skyhigh	BehavesLike.Win32.Injector.nm
McAfee	RDN/Generic Dropper
Sangfor	Trojan.Win32.Agent.Vbo7
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	TrojanDropper:Win32/Generic.01e48b46
K7GW	Trojan ( 005b1a3b1 )
K7AntiVirus	Trojan ( 005b1a3b1 )
BitDefenderTheta	AI:Packer.A271CAAA1E
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Agent_AGen.DDZ
Cynet	Malicious (score: 99)
Kaspersky	Trojan-Dropper.Win32.Agent.tfscnn
BitDefender	Gen:Variant.Doina.69854
Avast	Win32:TrojanX-gen [Trj]
Tencent	Win32.Trojan-Dropper.Agent.Aujl
Emsisoft	Gen:Variant.Doina.69854 (B)
F-Secure	Trojan.TR/Agent_AGen.htobb
VIPRE	Gen:Variant.Doina.69854
Sophos	Mal/Generic-S
Ikarus	Trojan.Win32.Agent
GData	Gen:Variant.Doina.69854
Avira	TR/Agent_AGen.htobb
Antiy-AVL	Trojan/Win32.Wacatac
Kingsoft	Win32.Troj.Undef.a
Arcabit	Trojan.Doina.D110DE
ZoneAlarm	Trojan-Dropper.Win32.Agent.tfscnn
Microsoft	Trojan:Win32/Wacatac.B!ml
Google	Detected
AhnLab-V3	Trojan/Win.Generic.R634577
ALYac	Gen:Trojan.Heur.PT.c46@aGtnm1e
MAX	malware (ai score=87)
Cylance	unsafe
Panda	Trj/Chgt.AD
TrendMicro-HouseCall	TROJ_GEN.R002H09BA24
Rising	Trojan.Agent!8.B1E (TFE:5:m6lX4ciup7G)
Fortinet	W32/Agent_AGen.DDZ!tr
AVG	Win32:TrojanX-gen [Trj]
DeepInstinct	MALICIOUS

How to remove Doina.69854?

Doina.69854 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X