Doina.69854 (file analysis)

The Doina.69854 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Doina.69854 virus can do?

Sample contains Overlay data
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine Doina.69854?


File Info:
name: C05640431B09EB1DB689.mlw
path: /opt/CAPEv2/storage/binaries/b9a179bcd8fd3675857b7111cb9e4cdb3aa79ee58244ecda3c971c31662af33a
crc32: DE36ECA5
md5: c05640431b09eb1db6899b8bb9385f46
sha1: e1966c5300a03da4ee6c76076c15660ef65e2a7d
sha256: b9a179bcd8fd3675857b7111cb9e4cdb3aa79ee58244ecda3c971c31662af33a
sha512: 77ded709962bea676e7517970909973c43fd508481a401bcda97a2be19d2f2df8c546566ad52f9d953f912fad51f2615995b27607e66965b4105504c38ca953a
ssdeep: 384:rO+QoKaBPMAWt4cmOCl5zHmPeuaBU3losjuzZ6UwYRGZqg7P5sHy3SDkHuTyRH:SjBCEcO0ZGPP3lLuzZPKqYJSgHYyRH
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
tlsh: T1E6E2D7597E444CEBE661173C90E7C7B63A7CB191CA234F62F650BB348B337A1205A16E
sha3_384: 5f36cba6b34943c5f854e8f29223f25318ae7fea0b3e1ba32dfbd6dfa7c8d1e140f78c685a2511605c2974b5c873794d
ep_bytes: 57565383ec108b5c24248b7424208b7c
timestamp: 2024-02-09 04:28:32

Version Info:
0: [No Data]

Doina.69854 also known as:

Lionic	Trojan.Win32.Agent.Y!c
Elastic	malicious (high confidence)
Skyhigh	BehavesLike.Win32.Injector.nm
McAfee	GenericRXWN-OT!C05640431B09
Sangfor	Trojan.Win32.Agent.Vw7y
CrowdStrike	win/malicious_confidence_70% (W)
Symantec	ML.Attribute.HighConfidence
Kaspersky	Trojan-Dropper.Win32.Agent.tfsbbl
BitDefender	Gen:Variant.Doina.69854
MicroWorld-eScan	Gen:Variant.Doina.69854
Avast	FileRepMalware [Misc]
Tencent	Win32.Trojan-Dropper.Agent.Hplw
Emsisoft	Gen:Variant.Doina.69854 (B)
VIPRE	Gen:Variant.Doina.69854
FireEye	Generic.mg.c05640431b09eb1d
Avira	TR/Drop.Agent.rrudy
Antiy-AVL	Trojan/Win32.Wacatac
Microsoft	Trojan:Win32/Wacatac.B!ml
Arcabit	Trojan.Doina.D110DE
ZoneAlarm	Trojan-Dropper.Win32.Agent.tfsbbl
GData	Gen:Variant.Doina.69854
ALYac	Gen:Trojan.Heur.PT.c46@aGoavFj
MAX	malware (ai score=85)
Panda	Trj/Chgt.AD
TrendMicro-HouseCall	TROJ_GEN.R002H09BA24
Fortinet	W32/PossibleThreat
BitDefenderTheta	AI:Packer.0D90C25E1E
AVG	FileRepMalware [Misc]
DeepInstinct	MALICIOUS

How to remove Doina.69854?

Doina.69854 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X