Midie.104730 malicious file

The Midie.104730 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Midie.104730 virus can do?

• SetUnhandledExceptionFilter detected (possible anti-debug)
• Behavioural detection: Executable code extraction – unpacking
• Yara rule detections observed from a process memory dump/dropped files/CAPE
• Creates RWX memory
• Dynamic (imported) function loading detected
• Enumerates the modules from a process (may be used to locate base addresses in process injection)
• CAPE extracted potentially suspicious content
• Unconventionial language used in binary resources: Urdu (India)
• The binary likely contains encrypted or compressed data.
• Authenticode signature is invalid
• CAPE detected the RedLine malware family

How to determine Midie.104730?

File Info:
name: AE01F2BC706A36067098.mlw
path: /opt/CAPEv2/storage/binaries/15e53ff78ca402b6c76e10ce878d62a6c5eff3e29be5af39fd68c37470ba9c29
crc32: A0A3B809
md5: ae01f2bc706a36067098f0fb91ba00fe
sha1: 59ce206847ccac4240c238bbccfd5d8df994d3ec
sha256: 15e53ff78ca402b6c76e10ce878d62a6c5eff3e29be5af39fd68c37470ba9c29
sha512: f33e7a227adf25b1adf35a6e67c9bc0cad4f49309fa125a0f606941a7107eaafe82cd01eba6aa795c38eeb5faf100b6d49844bb1396778f5aaa5c682fad8cfe3
ssdeep: 6144:pmFGp25BoD6G+iDGOJdIRZE+ZLfTu9ph/AG/cgdxk6o+Wm4XJQ8:0u2Xo2FiDNT+ZLf69pKZak6U5Q
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T12E54F10277A0D472D5A72A30687C87E27E77B8326976CD4B3398362E5E712C09F71789
sha3_384: ed666c0e98de0d06e9a847fcda3c5a473b5bc5baab3d32795b2573228e2cfd621e116da387e552a2328ce2869477476c
ep_bytes: e8502a0000e989feffffcccccccccccc
timestamp: 2021-01-28 11:18:34

Version Info:
InternalName: bomgpiaruci.iwa
Copyright: Copyrighz (C) 2021, fudkat
ProductVersion: 13.54.77.27
Translation: 0x0114 0x046a

Midie.104730 also known as:

How to remove Midie.104730?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.