Malware

Midie.125771 (file analysis)

Malware Removal

The Midie.125771 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Midie.125771 virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Sample contains Overlay data
  • Presents an Authenticode digital signature
  • CAPE extracted potentially suspicious content
  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid
  • CAPE detected the RedLine malware family
  • Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Midie.125771?


File Info:

name: DCEE689D34044C2CC8CA.mlw
path: /opt/CAPEv2/storage/binaries/26c6004031a6e0f1789ebc7cae934e86e88504c8c7b081f27e5f9341b779b44d
crc32: DC5C58BF
md5: dcee689d34044c2cc8cae0f12c8c41df
sha1: 0a2d6e9b865aa5f2ff26303a2d6e1ec3419d6324
sha256: 26c6004031a6e0f1789ebc7cae934e86e88504c8c7b081f27e5f9341b779b44d
sha512: de7bda0538ac6975413fb42a87c64fc7657cae0800e5560961854f9ff4651f50d94d99612d408552aa6f6249a99722c9b5a3538378c5b4e4f40d2c15d73e61c6
ssdeep: 12288:lw3zk2EWiICSVtg0wBW3iFt4ONq30/4St2NBd0JoLdaoi9Bbk:lwDkNWBbVTb34k30/8dRi9
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T144E4EF3904A144ABC4A9AE39FF0BD4C172162EE1017C954E3EB36E783BD24579DF92E4
sha3_384: a0b39aff7b86d96e401a2c92fd1a0eb5c789cd7da313f95f9587b7fcf63c86617c465bf3aaa2e27c734c863b9a62bbcd
ep_bytes: e8c7170000e9a4feffff558bec83ec08
timestamp: 2023-07-11 10:35:19

Version Info:

0: [No Data]

Midie.125771 also known as:

BkavW32.AIDetectMalware
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.Midie.125771
Cylanceunsafe
VIPREGen:Variant.Midie.125771
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (D)
CyrenW32/Kryptik.KDY.gen!Eldorado
SymantecML.Attribute.HighConfidence
tehtrisGeneric.Malware
ESET-NOD32a variant of Win32/GenKryptik.GLRP
APEXMalicious
CynetMalicious (score: 100)
KasperskyVHO:Backdoor.Win32.Agent.gen
BitDefenderGen:Variant.Midie.125771
AvastWin32:TrojanX-gen [Trj]
EmsisoftGen:Variant.Midie.125771 (B)
F-SecureHeuristic.HEUR/AGEN.1318578
Trapminemalicious.high.ml.score
FireEyeGeneric.mg.dcee689d34044c2c
SophosGeneric ML PUA (PUA)
SentinelOneStatic AI – Malicious PE
GDataGen:Variant.Midie.125771
AviraHEUR/AGEN.1318578
ZoneAlarmVHO:Backdoor.Win32.Agent.gen
MicrosoftTrojan:Win32/Sabsik.FL.B!ml
GoogleDetected
AhnLab-V3Malware/Win.Generic.R590462
MAXmalware (ai score=88)
VBA32BScope.TrojanPSW.RedLine
MalwarebytesTrojan.MalPack
PandaTrj/Genetic.gen
IkarusTrojan.Win32.Crypt
FortinetW32/GenKryptik.GLRP!tr
BitDefenderThetaGen:NN.ZexaF.36302.RqZ@aK16zKm
AVGWin32:TrojanX-gen [Trj]
Cybereasonmalicious.b865aa
DeepInstinctMALICIOUS

How to remove Midie.125771?

Midie.125771 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment