Malware

Midie.75618 (file analysis)

Malware Removal

The Midie.75618 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Midie.75618 virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Reads data out of its own binary image
  • CAPE extracted potentially suspicious content
  • Drops a binary and executes it
  • Authenticode signature is invalid
  • Behavioural detection: Injection (inter-process)
  • Anomalous binary characteristics
  • Attempts to modify Explorer settings to prevent hidden files from being displayed

How to determine Midie.75618?


File Info:

name: 1A4746D22803CD0BD20E.mlw
path: /opt/CAPEv2/storage/binaries/7055109689b2eaeb20122ea8ad4ea00ef8536292a38787499fba22eed3149b54
crc32: 0D949E24
md5: 1a4746d22803cd0bd20e1289c6c2a9f4
sha1: 54fad90b06a9964ef00a4e393e3f1afc67485ef4
sha256: 7055109689b2eaeb20122ea8ad4ea00ef8536292a38787499fba22eed3149b54
sha512: 5a0c49829d129cffc9f6b7a4ae038b2a21d2337af44e1007a9a5aa4cbbaf8037716d4fa19508c710681d9484e4834139552b1fd5cecbe1dc4c3263e4f84c347b
ssdeep: 1536:PZqk3NcqMcMOaZk1GDGe0Pdb+d6DiUYot00gwn:YN5zDDypy6DiUru0gU
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T18314BE166586396AD45FBF3232B7EDB048A65DD415C6808E23860BDB3CD0901E3B6DFB
sha3_384: a190f5b092c269a5f04d4f74ad60b07e4fd0b7d8ee03ba70aae82ec8aec0c226490fbd3fb48b462e2431052c78cae225
ep_bytes: 68ac124000e8eeffffff000058000000
timestamp: 2010-09-18 07:50:11

Version Info:

Translation: 0x0409 0x04b0
ProductName: FFgqy
FileVersion: 2.99
ProductVersion: 2.99
InternalName: FFgqy
OriginalFilename: FFgqy.exe

Midie.75618 also known as:

BkavW32.AIDetectMalware
Elasticmalicious (high confidence)
DrWebWin32.HLLW.Autoruner1.35863
MicroWorld-eScanGen:Variant.Midie.75618
FireEyeGeneric.mg.1a4746d22803cd0b
CAT-QuickHealWorm.VBNA.gen
SkyhighBehavesLike.Win32.VBObfus.cm
McAfeeVBObfus
MalwarebytesGeneric.Malware.AI.DDS
VIPREGen:Variant.Midie.75618
SangforSuspicious.Win32.Save.a
K7AntiVirusTrojan ( 001a326f1 )
K7GWP2PWorm ( 001a326f1 )
CrowdStrikewin/malicious_confidence_100% (D)
ArcabitTrojan.Midie.D12762
BitDefenderThetaAI:Packer.6F89640120
VirITTrojan.Win32.Generic.SIT
SymantecW32.Changeup!gen10
tehtrisGeneric.Malware
ESET-NOD32a variant of Win32/AutoRun.VB.UA
APEXMalicious
CynetMalicious (score: 100)
KasperskyWorm.Win32.WBNA.ipa
BitDefenderGen:Variant.Midie.75618
NANO-AntivirusTrojan.Win32.WBNA.csfhjf
AvastWin32:WormX-gen [Wrm]
SophosMal/SillyFDC-D
F-SecureTrojan.TR/Dropper.Gen
BaiduWin32.Worm.VB.al
ZillyaWorm.WBNAGen.Win32.7
TrendMicroWORM_ESFURY.SMA
Trapminemalicious.high.ml.score
EmsisoftGen:Variant.Midie.75618 (B)
SentinelOneStatic AI – Malicious PE
JiangminWorm.WBNA.kbyr
GoogleDetected
AviraTR/Dropper.Gen
MAXmalware (ai score=82)
Antiy-AVLWorm/Win32.WBNA.gen
Kingsoftmalware.kb.a.999
XcitiumTrojWare.Win32.VBKrypt.2@22yg5l
MicrosoftWorm:Win32/Vobfus!pz
ZoneAlarmWorm.Win32.WBNA.ipa
GDataGen:Variant.Midie.75618
VaristW32/Vobfus.I.gen!Eldorado
AhnLab-V3Win-Trojan/VBKrypt.RP03.X1850
VBA32TScope.Trojan.VB
ALYacGen:Variant.Midie.75618
TACHYONWorm/W32.WBNA.200704.B
Cylanceunsafe
PandaGeneric Malware
TrendMicro-HouseCallWORM_ESFURY.SMA
RisingWorm.Autorun!8.50 (TFE:3:AMCHQRBuEDJ)
YandexTrojan.VBKrypt.Gen
IkarusWorm.Win32.Vobfus
FortinetW32/VBObfus.CJX!tr
AVGWin32:WormX-gen [Wrm]
Cybereasonmalicious.b06a99
DeepInstinctMALICIOUS

How to remove Midie.75618?

Midie.75618 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment