Malware

Midie.105334 removal tips

Malware Removal

The Midie.105334 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Midie.105334 virus can do?

  • SetUnhandledExceptionFilter detected (possible anti-debug)
  • Behavioural detection: Executable code extraction – unpacking
  • At least one process apparently crashed during execution
  • Dynamic (imported) function loading detected
  • Yara rule detections observed from a process memory dump/dropped files/CAPE
  • Creates RWX memory
  • CAPE extracted potentially suspicious content
  • Unconventionial language used in binary resources: Nepali
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Detects Sandboxie through the presence of a library
  • Detects Avast Antivirus through the presence of a library
  • Checks the presence of disk drives in the registry, possibly for anti-virtualization

How to determine Midie.105334?


File Info:

name: 1BC9E2D6BCD9C0394370.mlw
path: /opt/CAPEv2/storage/binaries/35c6ab5047a0dbcb1ec60d072f33dae338443730b05f7f3438d95f6f209b8f1c
crc32: 9ADD6D38
md5: 1bc9e2d6bcd9c039437059252c399ab8
sha1: bc528935f37214b902cc7236c34a11df3933f390
sha256: 35c6ab5047a0dbcb1ec60d072f33dae338443730b05f7f3438d95f6f209b8f1c
sha512: 94ffdc557f9a0b7f291ce159e43d0f66b6d02dd79d8fb724358ac257b927558d3d2af9e1987726deaec291420121507f1206104efec4aceab89607359704baec
ssdeep: 3072:hc94AasjGN1DIyKZgui9ZFoJiz+iKghFOhrDVQwC6VhuehWXSbgtQHsj5fe1xrC:q2ADGTkdmZZ/hFADVbVhwSJHsaxu
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1B654AD2133D0C032D59725768925CBB58E7AB0701A666ACFFBC81EBD9F247D1A73530A
sha3_384: bf51ef6ece8afb3b46e5cda05bd96d7795b0dc3ca2b6017cea84ccd88add1d5ce859db6788eaa9cc85c5825d8ac8ce6b
ep_bytes: e86f890000e978feffff8bff558bec83
timestamp: 2020-10-12 00:33:29

Version Info:

FileVers: 65.51.36.16
ProductVersa: 7.0.25.71
InternalName: eaLatemas
LegalCopyrighd: Jdfglsdffa
Translations: 0x0169 0x0300

Midie.105334 also known as:

BkavW32.AIDetect.malware2
Elasticmalicious (high confidence)
DrWebTrojan.DownLoader44.11112
MicroWorld-eScanGen:Variant.Midie.105334
FireEyeGeneric.mg.1bc9e2d6bcd9c039
McAfeeTrojan-FUBT!1BC9E2D6BCD9
CylanceUnsafe
SangforTrojan.Win32.Save.a
K7GWHacktool ( 700007861 )
Cybereasonmalicious.5f3721
BitDefenderThetaGen:NN.ZexaF.34062.rq0@ayexfMmG
CyrenW32/Kryptik.FXB.gen!Eldorado
SymantecPacked.Generic.620
ESET-NOD32a variant of Win32/Kryptik.HNOO
KasperskyHEUR:Trojan.Win32.Agent.gen
BitDefenderGen:Variant.Midie.105334
AvastWin32:CrypterX-gen [Trj]
Ad-AwareGen:Variant.Midie.105334
SentinelOneStatic AI – Malicious PE
GDataWin32.Trojan.PSE.1CNP511
MAXmalware (ai score=87)
ArcabitTrojan.Mikey.D20619
MicrosoftTrojan:Win32/DllCheck.A!MSR
CynetMalicious (score: 100)
AhnLab-V3CoinMiner/Win.Glupteba.R456355
Acronissuspicious
VBA32Malware-Cryptor.2LA.gen
MalwarebytesMalware.AI.1744632878
APEXMalicious
RisingMalware.Heuristic!ET#92% (RDMK:cmRtazp4lS5l1Zt5RsMSpsfvIiZR)
IkarusTrojan.Win32.Crypt
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Kryptik.HNOL!tr
AVGWin32:CrypterX-gen [Trj]
PandaTrj/Genetic.gen
CrowdStrikewin/malicious_confidence_60% (D)

How to remove Midie.105334?

Midie.105334 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment