Midie.106154 (B) malicious file

The Midie.106154 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Midie.106154 (B) virus can do?

SetUnhandledExceptionFilter detected (possible anti-debug)
Dynamic (imported) function loading detected
Authenticode signature is invalid

How to determine Midie.106154 (B)?


File Info:
name: 1904C40F458D6761BC59.mlw
path: /opt/CAPEv2/storage/binaries/5be6155d8439d0af665cf52b0d38ba611192bba46a3b6fa2fad6de7890a5cf05
crc32: CD9CCD14
md5: 1904c40f458d6761bc59e65dbb2a66cd
sha1: 76d7c7c0d40fa5deb63b26d20158d1d22c449484
sha256: 5be6155d8439d0af665cf52b0d38ba611192bba46a3b6fa2fad6de7890a5cf05
sha512: 9d38e1a881351b40c5bd858718d1ed8bf24e8ac95cdc558f2f1ba160890baca48eb5878e2ca18b6704e3ccb79d7b43e34527b8242913a74238a2954ffdf20555
ssdeep: 6144:ZH8aVRAawJhyvx1QZbhq45Rp2QSIvVW4UuoqHzAOAsJ8S4WdQGvA5a:ZLSzJhwx1QZbB5GQ/VIuoqTyMt8a
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T1AB94B0106C528671D5A11DB009A8D6F48729BCDE0E2155AB33F09F3BFEAE1B2593C93D
sha3_384: 0c635d80843b96e2106a20e6e05d7a767c0e3e183dd2b0435f5b533d9f59fbf2a24712ef7213e15255edf1590c1cac94
ep_bytes: e816080000e974feffff8b4df464890d
timestamp: 2021-12-23 03:33:00

Version Info:
FileVersion: 1.0.0.5
LegalCopyright: 2020-2022 All rights reserved
Translation: 0x0409 0x04b0

Midie.106154 (B) also known as:

Lionic	Trojan.Win32.Agentb.4!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Midie.106154
FireEye	Generic.mg.1904c40f458d6761
McAfee	GenericRXRF-YE!1904C40F458D
Cylance	Unsafe
K7AntiVirus	Trojan ( 0058c30d1 )
Alibaba	Trojan:Win32/Clipbanker.6cbf79b1
K7GW	Trojan ( 0058c30d1 )
Cybereason	malicious.f458d6
BitDefenderTheta	Gen:NN.ZexaF.34114.zu0@aGettlbi
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Agent.ADUB
TrendMicro-HouseCall	TROJ_GEN.R002C0PA722
Kaspersky	HEUR:Trojan.Win32.Agentb.gen
BitDefender	Gen:Variant.Midie.106154
Avast	Win32:PWSX-gen [Trj]
Tencent	Malware.Win32.Gencirc.10cfaf36
Ad-Aware	Gen:Variant.Midie.106154
TrendMicro	TROJ_GEN.R002C0PA722
McAfee-GW-Edition	GenericRXRF-YE!1904C40F458D
Emsisoft	Gen:Variant.Midie.106154 (B)
GData	Win32.Trojan.PSE.KDHUEU
Jiangmin	Trojan.Agentb.ldq
Avira	HEUR/AGEN.1202295
MAX	malware (ai score=82)
Antiy-AVL	Trojan/Generic.ASMalwS.34F9318
Gridinsoft	Ransom.Win32.Sabsik.sa
Arcabit	Trojan.Midie.D19EAA
ViRobot	Trojan.Win32.Z.Midie.421888
Microsoft	Trojan:Win32/Sabsik!ml
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win.Generic.R460550
VBA32	Trojan.Agentb
ALYac	Gen:Variant.Midie.106154
Malwarebytes	Malware.AI.4035918426
APEX	Malicious
Rising	Trojan.Agent!8.B1E (CLOUD)
Ikarus	Trojan.Win32.Agent
Fortinet	W32/Redcap.ROQJ!tr
AVG	Win32:PWSX-gen [Trj]
Panda	Trj/Genetic.gen
CrowdStrike	win/malicious_confidence_60% (W)

How to remove Midie.106154 (B)?

Midie.106154 (B) removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X