Doina.69854 malicious file

The Doina.69854 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Doina.69854 virus can do?

Sample contains Overlay data
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine Doina.69854?


File Info:
name: B73EC4C9642A2419407A.mlw
path: /opt/CAPEv2/storage/binaries/c279cd119b19746a3e4d2210a9e11788e95aeab701249534b0e4580e2d9b4264
crc32: 8E338CB1
md5: b73ec4c9642a2419407abc52660902d8
sha1: 69622fcbed2cb0d57ed55bf3f41d014d2556b923
sha256: c279cd119b19746a3e4d2210a9e11788e95aeab701249534b0e4580e2d9b4264
sha512: 3e6a8ad212cdb5f3e7022fe411a7df4c4e0a37a4184af5d9aafa2e3bb96f7ee189ff21878ac969b637cf10cc31ed31710cf652700a6e3fd9dacb15c0acd1bd88
ssdeep: 384:Ir4lrQ/90MPvnOClAX/smPeuaBU3losjuzZ6UwYRGZqw7Pa39rFDksuTyRZ:K4Gl0uO0K/bPP3lLuzZPKqIKrFgsYyRZ
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
tlsh: T1E9E2D7597E444CEBEA601B38D0E6C77A2A7DB050C6234F63F650B7308B73795219B26E
sha3_384: 746c0453debf8925a5d252d134efc48db3b6e5d52331e9ec9b2f45154be9711f924c460e64013c326acdadfe8ddd028a
ep_bytes: 57565383ec108b5c24248b7424208b7c
timestamp: 2024-02-09 10:38:12

Version Info:
0: [No Data]

Doina.69854 also known as:

Lionic	Trojan.Win32.Agent.Y!c
MicroWorld-eScan	Gen:Variant.Doina.69854
FireEye	Gen:Variant.Doina.69854
CAT-QuickHeal	TrojanDropper.Agent
Skyhigh	Artemis!Trojan
ALYac	Gen:Variant.Doina.69854
Cylance	unsafe
Sangfor	Trojan.Win32.Agent.Vf21
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	Trojan:Win32/Generic.f7150947
K7GW	Trojan ( 005b1a3b1 )
K7AntiVirus	Trojan ( 005b1a3b1 )
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/Injector.ETQB
Cynet	Malicious (score: 99)
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Gen:Variant.Doina.69854
Avast	Win32:TrojanX-gen [Trj]
Emsisoft	Gen:Variant.Doina.69854 (B)
F-Secure	Trojan.TR/Agent_AGen.jqfqc
VIPRE	Gen:Variant.Doina.69854
Sophos	Mal/Generic-S
Ikarus	Trojan.Win32.Agent
GData	Win32.Trojan.PSE.JBENC0
Google	Detected
Avira	TR/Agent_AGen.jqfqc
Antiy-AVL	Trojan/Win32.Wacatac
Arcabit	Trojan.Doina.D110DE
ZoneAlarm	HEUR:Trojan.Win32.Generic
Microsoft	Trojan:Win32/Wacatac.B!ml
Varist	W32/Agent.IHW.gen!Eldorado
AhnLab-V3	Trojan/Win.Generic.R634577
McAfee	GenericRXWN-OT!B73EC4C9642A
MAX	malware (ai score=80)
Malwarebytes	Trojan.Injector
TrendMicro-HouseCall	TROJ_GEN.R002H09BA24
Rising	Trojan.Agent!8.B1E (TFE:5:5yrSmtHEpaC)
MaxSecure	Trojan.Malware.121218.susgen
Fortinet	W32/Agent_AGen.DDZ!tr
BitDefenderTheta	AI:Packer.5AA2D7311E
AVG	Win32:TrojanX-gen [Trj]
DeepInstinct	MALICIOUS

How to remove Doina.69854?

Doina.69854 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X