Categories: Malware

Midie.112273 removal tips

The Midie.112273 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Midie.112273 virus can do?

Behavioural detection: Executable code extraction – unpacking
CAPE extracted potentially suspicious content
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
Authenticode signature is invalid
Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Midie.112273?


File Info:
name: B2588DADE38CDC436912.mlwpath: /opt/CAPEv2/storage/binaries/60be54a771520829f55ae2c59061f62544e68067b1501e16ac1d64fe659ebd2acrc32: 4CBF918Fmd5: b2588dade38cdc4369121ab1c58e1661sha1: c0a78fc4529c028f8d6a2b2dbf6e9dce6d8c32absha256: 60be54a771520829f55ae2c59061f62544e68067b1501e16ac1d64fe659ebd2asha512: 6ccb471ea0d52506fb112becb2715cb5c4dedd71111b1ebe936e26289c4806bfa8c010bec32dbf75b8f6e332e895f34df4e65e286738b934a4c5142a26a00e02ssdeep: 6144:5XiNfX6JhqZIHnzfSvPVxPXB+k11wNimD94PnlWTxWWWWWWW:5XiNfqaZsfUvJ+k13LiWWWWWWWtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1CE645A12F2908833C5A2827C4FD18BBABEE5FE714AE54D43379C7B1D1E35791862E225sha3_384: 6d5beb8f919fa3d123585ea067c8d5aa523b8ebcb92f9552e81fcca9c8494e90909bb0e3c100f028d5ef3ce2833dd4a0ep_bytes: 558bec6aff68c8a842006834f4400064timestamp: 2022-05-11 05:08:59
Version Info:
Comments: CompanyName: FileDescription: MFCDialog Microsoft 基础类应用程序FileVersion: 1, 0, 0, 1InternalName: MFCDialogLegalCopyright: 版权所有 (C) 2012LegalTrademarks: OriginalFilename: MFCDialog.EXEPrivateBuild: ProductName: MFCDialog 应用程序ProductVersion: 1, 0, 0, 1SpecialBuild: Translation: 0x0804 0x04b0

Midie.112273 also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Midie.4!c
Elastic	malicious (high confidence)
DrWeb	Trojan.MulDrop20.6207
MicroWorld-eScan	Gen:Variant.Midie.112273
ClamAV	Win.Trojan.Gh0stRAT-9955419-1
Skyhigh	GenericRXTD-KC!B2588DADE38C
McAfee	GenericRXTD-KC!B2588DADE38C
Malwarebytes	Generic.Malware.AI.DDS
VIPRE	Gen:Variant.Midie.112273
Sangfor	Suspicious.Win32.Save.ins
K7AntiVirus	Trojan-Downloader ( 00592d771 )
Alibaba	Backdoor:Win32/GhostRatCrypt.b4bf2a0c
K7GW	Trojan-Downloader ( 00592d771 )
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/TrojanDownloader.Agent.FUM
APEX	Malicious
Cynet	Malicious (score: 99)
Kaspersky	HEUR:Backdoor.Win32.Lotok.gen
BitDefender	Gen:Variant.Midie.112273
NANO-Antivirus	Trojan.Win32.Lotok.jrwxni
Avast	Win32:Trojan-gen
Tencent	Malware.Win32.Gencirc.10bd8af1
Emsisoft	Gen:Variant.Midie.112273 (B)
F-Secure	Trojan.TR/Dldr.Agent.uxiiz
Zillya	Downloader.Agent.Win32.469925
TrendMicro	TROJ_GEN.R002C0DI723
Trapmine	malicious.high.ml.score
FireEye	Generic.mg.b2588dade38cdc43
Sophos	Troj/Farfli-DZ
GData	Gen:Variant.Midie.112273
Jiangmin	Backdoor.Lotok.att
Google	Detected
Avira	TR/Dldr.Agent.uxiiz
MAX	malware (ai score=87)
Antiy-AVL	Trojan[Backdoor]/Win32.Lotok
Kingsoft	malware.kb.a.908
Arcabit	Trojan.Midie.D1B691
ZoneAlarm	HEUR:Backdoor.Win32.Lotok.gen
Microsoft	Trojan:Win32/GhostRatCrypt.GA!MTB
Varist	W32/ABRisk.ZIFH-8900
AhnLab-V3	Trojan/Win.GhostRatCrypt.R606600
VBA32	BScope.Backdoor.Farfli
ALYac	Gen:Variant.Midie.112273
TACHYON	Backdoor/W32.Lotok.319488.B
Cylance	unsafe
Panda	Trj/GdSda.A
TrendMicro-HouseCall	TROJ_GEN.R002C0DI723
Rising	Backdoor.Shellex!1.E4E9 (CLASSIC)
Yandex	Trojan.DL.Agent!ts4yEabsscg
Ikarus	Trojan.Win32.Injector
MaxSecure	Trojan.Malware.102820574.susgen
Fortinet	W32/Farfli.BSIK!tr
AVG	Win32:Trojan-gen
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_100% (W)