Doina.69854 (file analysis)

The Doina.69854 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Doina.69854 virus can do?

Sample contains Overlay data
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine Doina.69854?


File Info:
name: A6B616C38ADEB152D0D2.mlw
path: /opt/CAPEv2/storage/binaries/ab0d8c34bb001b3d7c99db789523449d576b8956f0ae94247ff564a242bff881
crc32: 6370ECFC
md5: a6b616c38adeb152d0d284fa1f1b87ec
sha1: 1b40e0db29078bc88d97b7096f1e6d9adec60de3
sha256: ab0d8c34bb001b3d7c99db789523449d576b8956f0ae94247ff564a242bff881
sha512: 0e8db363746e88c6b96a7d4c5e14fcca24545d73ae876bff04bad741692cf7c8fd752fe6059b0ac705ce4027c6bc6c7cae89a874cde329e30cf0f79ffe6af193
ssdeep: 768:npOtQWaGO22TPP3lLuzZPKq8tSeYaY5Ri:npOtLaGATPP3lLuBZ8twaZ
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
tlsh: T110F2B86A7E484CFBE9601738D0E6C7762B7CB151C6234F62F660B7308B33795215A26E
sha3_384: 5ced2e268d185da33b74b14a5ce05d84109fa36b7e81c118f614a5c0a06a28366770ae5fd2db9406ffddc9eee924e590
ep_bytes: 57565383ec108b5c24248b7424208b7c
timestamp: 2024-02-09 07:25:27

Version Info:
0: [No Data]

Doina.69854 also known as:

Lionic	Trojan.Win32.Agent.Y!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Doina.69854
Skyhigh	BehavesLike.Win32.Injector.nm
McAfee	GenericRXWN-OS!A6B616C38ADE
VIPRE	Gen:Variant.Doina.69854
Sangfor	Trojan.Win32.Agent.V2l9
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	TrojanDropper:Win32/Generic.f5cc0dbc
K7GW	Trojan ( 005b1a3e1 )
K7AntiVirus	Trojan ( 005b1a3e1 )
BitDefenderTheta	AI:Packer.1DF99E311E
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Agent_AGen.DDU
Cynet	Malicious (score: 99)
Kaspersky	Trojan-Dropper.Win32.Agent.tfscaj
BitDefender	Gen:Variant.Doina.69854
Avast	Win32:TrojanX-gen [Trj]
Tencent	Win32.Trojan-Dropper.Agent.Simw
Emsisoft	Gen:Variant.Doina.69854 (B)
F-Secure	Trojan.TR/Agent_AGen.eddkh
FireEye	Generic.mg.a6b616c38adeb152
Sophos	Mal/Generic-S
GData	Gen:Variant.Doina.69854
Google	Detected
Avira	TR/Agent_AGen.eddkh
MAX	malware (ai score=84)
Antiy-AVL	Trojan/Win32.Wacatac
Kingsoft	Win32.Troj.Undef.a
Arcabit	Trojan.Doina.D110DE
ZoneAlarm	Trojan-Dropper.Win32.Agent.tfscaj
Microsoft	Trojan:Win32/Wacatac.B!ml
AhnLab-V3	Trojan/Win.Generic.R634577
ALYac	Gen:Trojan.Heur.PT.c46@a4cpkag
Cylance	unsafe
Panda	Trj/Chgt.AD
TrendMicro-HouseCall	TROJ_GEN.R002H07BA24
Rising	Trojan.Agent!8.B1E (TFE:5:tZbrIGeRjqS)
Ikarus	Trojan.Win32.Agent
AVG	Win32:TrojanX-gen [Trj]
DeepInstinct	MALICIOUS

How to remove Doina.69854?

Doina.69854 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X