Categories: Malware

What is “Midie.104576 (B)”?

The Midie.104576 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Midie.104576 (B) virus can do?

SetUnhandledExceptionFilter detected (possible anti-debug)
Behavioural detection: Executable code extraction – unpacking
Yara rule detections observed from a process memory dump/dropped files/CAPE
Creates RWX memory
Dynamic (imported) function loading detected
CAPE extracted potentially suspicious content
Multiple direct IP connections
Unconventionial language used in binary resources: Latvian
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
CAPE detected the Raccoon malware family
Collects information to fingerprint the system

Related domains:

t.me

How to determine Midie.104576 (B)?


File Info:
name: C4212F4E2EB5692FEA9A.mlwpath: /opt/CAPEv2/storage/binaries/3c5e4920c8cd60658990af47cd19693ce0de1ea2d9ad82fd116af70dbe9ab2edcrc32: 25AA6026md5: c4212f4e2eb5692fea9a271c78c21a15sha1: c2066075cf800a3ad6bd922bb6d1764f7ceaafcdsha256: 3c5e4920c8cd60658990af47cd19693ce0de1ea2d9ad82fd116af70dbe9ab2edsha512: 5669edd293bd39598206bef90da082726083fa4d3dd14085299dd10fd9e6487116406e806c7f4c0d4be66d081ea8d7c8c78fbc45b5ec070250cdc11b46b68e08ssdeep: 12288:YrhRkBcbsrv9xqWLVxhd3EqdtjNWfx/t0OVKcvysF:YvkWbsrXzUkT+n0qxtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T11D94122131A0D532D6E7153CBD38C6AD497BF8326830414BB7A91A7E1E71EC34AE9787sha3_384: 981ebfe6cecdf1bd189c7dfe8f719aa1498b9ac59e60afc2072f871c8a90d0a0a1b9baa6eca4c7451b01498d5ddfe850ep_bytes: e8d02a0000e989feffff8bff558bec68timestamp: 2021-01-26 16:23:32
Version Info:
InternalName: bomgpiaruci.iwaCopyright: Copyrighz (C) 2021, fudkatProductVersion: 13.54.77.25Translation: 0x0114 0x046a

Midie.104576 (B) also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Midie.104576
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Trojan ( 00589d2d1 )
K7GW	Trojan ( 00589d2d1 )
Cybereason	malicious.5cf800
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Kryptik.HNKH
APEX	Malicious
Kaspersky	VHO:Trojan-Spy.Win32.Stealer.gen
BitDefender	Gen:Variant.Midie.104576
Avast	Win32:CrypterX-gen [Trj]
Rising	Trojan.Generic@ML.80 (RDML:c2uhtpNOTARl1ppT9/aYzg)
Ad-Aware	Gen:Variant.Midie.104576
Emsisoft	Gen:Variant.Midie.104576 (B)
DrWeb	Trojan.PWS.Stealer.31482
McAfee-GW-Edition	BehavesLike.Win32.Emotet.gc
FireEye	Generic.mg.c4212f4e2eb5692f
Sophos	ML/PE-A + Mal/Agent-AWV
Ikarus	Trojan-Ransom.StopCrypt
Avira	TR/AD.StellarStealer.iwwko
MAX	malware (ai score=84)
Microsoft	Ransom:Win32/LockbitCrypt.SV!MTB
GData	Gen:Variant.Midie.104576
Cynet	Malicious (score: 100)
AhnLab-V3	CoinMiner/Win.Glupteba.R452303
Acronis	suspicious
McAfee	Packed-GEE!C4212F4E2EB5
Malwarebytes	Trojan.MalPack.GS
SentinelOne	Static AI – Malicious PE
eGambit	Unsafe.AI_Score_100%
Fortinet	W32/Kryptik.HNKE!tr
BitDefenderTheta	Gen:NN.ZexaF.34294.Aq0@aCyrRNaI
AVG	Win32:CrypterX-gen [Trj]
Panda	Trj/RnkBend.A
CrowdStrike	win/malicious_confidence_100% (D)
MaxSecure	Trojan.Malware.300983.susgen