Midie.82085 (file analysis)

The Midie.82085 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Midie.82085 virus can do?

The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine Midie.82085?


File Info:
name: 9EF8CDB92F309EBDF194.mlw
path: /opt/CAPEv2/storage/binaries/dbc14421d7b679553e9394c509bf14534e0c57d276d9b43292a777f4c2449485
crc32: F4489F0E
md5: 9ef8cdb92f309ebdf1940c5f0eb51605
sha1: 946c8a882429bfd0103c952c62830543ca6968a6
sha256: dbc14421d7b679553e9394c509bf14534e0c57d276d9b43292a777f4c2449485
sha512: e165f54a9140ea4d15e9f54a31692bd4d4c064efceafe2ddd83250b5bc9139d5350d01763b4c862d20571ff8c7b60947d2a0a5f1f2397506051b18fa806e2e71
ssdeep: 3072:MTLD5gEuKqLsO8nUrWqhjjjjjjjjjaxmsMy5:Y5RDqLonRxmsF
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T105C38CFA313B9012DABDC7F8FEBD424702A35F0C5F55019A8948EC42E5952E6E0E71DA
sha3_384: cf576676c76e8415884fe93cfefa00a05e7ee0d9c3eee896f1ccc064fcdbae6633e24551bc25e7af8e2ad04fd8d8229b
ep_bytes: 558bec83ec48a150104000a368c64100
timestamp: 2014-02-19 20:18:23

Version Info:
0: [No Data]

Midie.82085 also known as:

Bkav	W32.AIDetect.malware2
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Midie.82085
FireEye	Generic.mg.9ef8cdb92f309ebd
CAT-QuickHeal	TrojanDownloader.Kuluoz.D3
ALYac	Gen:Variant.Midie.82085
VIPRE	Trojan.Win32.Kuluoz.bb (v)
Sangfor	Trojan.Win32.Dofoil.bvup
K7AntiVirus	Backdoor ( 0040f7921 )
BitDefender	Gen:Variant.Midie.82085
K7GW	Backdoor ( 0040f7921 )
Cybereason	malicious.92f309
Baidu	Win32.Trojan.Kryptik.ez
VirIT	Trojan.Win32.Crypt2.CONE
Symantec	Packed.Generic.459
ESET-NOD32	a variant of Win32/Kryptik.BVLP
APEX	Malicious
Kaspersky	Trojan-Downloader.Win32.Dofoil.bvup
NANO-Antivirus	Trojan.Win32.Androm.ctqick
Rising	Downloader.Dofoil!8.322 (CLOUD)
Emsisoft	Gen:Variant.Midie.82085 (B)
Comodo	TrojWare.Win32.Kryptik.BVPL@57uzhp
DrWeb	BackDoor.Kuluoz.4
Zillya	Backdoor.Androm.Win32.10501
TrendMicro	BKDR_KULUOZ.SM99
McAfee-GW-Edition	BehavesLike.Win32.Generic.ch
Sophos	Mal/Generic-R
Ikarus	Backdoor.Win32.Androm
Jiangmin	TrojanDownloader.Dofoil.dkx
MAX	malware (ai score=83)
Antiy-AVL	Trojan/Generic.ASMalwS.81D9A6
Microsoft	TrojanDownloader:Win32/Kuluoz.D
GData	Gen:Variant.Midie.82085
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win32.Zbot.R109482
McAfee	Trojan-FDQB!9EF8CDB92F30
VBA32	Backdoor.Androm
Cylance	Unsafe
TrendMicro-HouseCall	BKDR_KULUOZ.SM99
Yandex	Trojan.GenAsa!1lhyYwVnl8k
SentinelOne	Static AI – Malicious PE
Fortinet	W32/GenKryptik.ATAM!tr
CrowdStrike	win/malicious_confidence_100% (D)

How to remove Midie.82085?

Midie.82085 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X