Malware

What is “Midie.70842”?

Malware Removal

The Midie.70842 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Midie.70842 virus can do?

  • Executable code extraction
  • Creates RWX memory
  • A process attempted to delay the analysis task.
  • Reads data out of its own binary image
  • Drops a binary and executes it
  • Unconventionial language used in binary resources: Maori
  • The binary likely contains encrypted or compressed data.
  • Creates a hidden or system file
  • Creates a copy of itself
  • Anomalous binary characteristics

Related domains:

uploadp2p.publicvm.com

How to determine Midie.70842?


File Info:

crc32: C99AA412
md5: 3448fbc125db6ef0c7a3061e964e8048
name: ball.exe
sha1: fb980afe0305fcdcabfcb4eafcdfc58d9472420c
sha256: 5843e5a3dadc8aa506ff5db66ee40d303d2e279db4679776edf3b3dcc430a420
sha512: 9d9ae537cecbe9ce48af7221b894bd8044aab6663554e030e846a1a2d1acca2e24f7364fe6e6d523b744dec0ed51277ec70425da06839f543c230b0869876b39
ssdeep: 6144:QPRGodp3spBHv/RibMhAa9uxRVlczfed3N38p7Cy9ApY:QPRbp3CBv/AbMP9u76fe3347CuH
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Midie.70842 also known as:

BkavW32.AIDetectVM.malware
MicroWorld-eScanGen:Variant.Midie.70842
FireEyeGeneric.mg.3448fbc125db6ef0
McAfeeRDN/Generic.tfr
CylanceUnsafe
VIPRETrojan.Win32.Generic!BT
SangforMalware
BitDefenderGen:Variant.Midie.70842
K7GWHacktool ( 700007861 )
Cybereasonmalicious.e0305f
TrendMicroTrojan.Win32.WACATAC.THBBHBO
BitDefenderThetaGen:NN.ZexaF.34090.quW@a4uMMCcG
ESET-NOD32a variant of Win32/Kryptik.HBNM
TrendMicro-HouseCallTrojan.Win32.WACATAC.THBBHBO
AvastWin32:CoinminerX-gen [Trj]
GDataGen:Variant.Midie.70842
KasperskyTrojan-Spy.Win32.Recam.ampo
AlibabaTrojanSpy:Win32/Recam.0d9a8670
AegisLabTrojan.Win32.Recam.l!c
TencentWin32.Trojan-spy.Recam.Lhwy
Endgamemalicious (high confidence)
EmsisoftGen:Variant.Midie.70842 (B)
F-SecureTrojan.TR/AD.NetWiredRc.kgbfo
Invinceaheuristic
McAfee-GW-EditionBehavesLike.Win32.MultiPlug.dh
SentinelOneDFI – Malicious PE
Trapminesuspicious.low.ml.score
APEXMalicious
CyrenW32/Trojan.ZZWJ-0841
AviraTR/AD.NetWiredRc.kgbfo
MicrosoftTrojan:Win32/Occamy.C
ArcabitTrojan.Midie.D114BA
AhnLab-V3Trojan/Win32.MalPe.R327501
ZoneAlarmTrojan-Spy.Win32.Recam.ampo
Acronissuspicious
ALYacGen:Variant.Midie.70842
MAXmalware (ai score=81)
Ad-AwareGen:Variant.Midie.70842
MalwarebytesSpyware.AzorUlt
PandaTrj/GdSda.A
RisingSpyware.Recam!8.5E5 (CLOUD)
IkarusWin32.Outbreak
eGambitUnsafe.AI_Score_75%
FortinetW32/Kryptik.HBMT!tr
AVGWin32:CoinminerX-gen [Trj]
CrowdStrikewin/malicious_confidence_100% (W)
Qihoo-360HEUR/QVM10.1.9067.Malware.Gen

How to remove Midie.70842?

Midie.70842 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment