Categories: Malware

What is “Midie.99463”?

The Midie.99463 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Midie.99463 virus can do?

SetUnhandledExceptionFilter detected (possible anti-debug)
Yara rule detections observed from a process memory dump/dropped files/CAPE
Dynamic (imported) function loading detected
Reads data out of its own binary image
Drops a binary and executes it
Unconventionial language used in binary resources: Chinese (Simplified)
Authenticode signature is invalid

How to determine Midie.99463?


File Info:
name: 743F2C6956E2395AE451.mlwpath: /opt/CAPEv2/storage/binaries/626544dad80a1cbe1919f96125fd7c93da951bc22f201541f5e11142fa1ac6dccrc32: FFED72E7md5: 743f2c6956e2395ae4514585884ee0f9sha1: 5dab47539835c9ac1cbf7d52a700bc7ac7ae77f1sha256: 626544dad80a1cbe1919f96125fd7c93da951bc22f201541f5e11142fa1ac6dcsha512: 24d929f24d7ff6f9c841b4d2a47fdcbc72adf7437dbaec13ef51c1e67adeb0fa015ac72ced9929c7d9eb82bd3f5272438ea0b9f11421e4fdd491e8a97e526c32ssdeep: 6144:cAicpUrW0/uZ/0/Z06Kbv8vee6g2/Zt/cRsB:cAicaW0/ux56Kbv8vee6gUERsBtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T193849E32FA4290B6E20116F62BF0673CFDFC86436C134553EB98DD752D71A71AA27A09sha3_384: 6d66c83a97bac4fdb40f18ecb74bc71713cefda6b0a52b739dd105f0423c3e3104ac02378e07784f89b9e558bc7d8b84ep_bytes: 558bec6aff683852440068e821420064timestamp: 2018-10-28 11:51:32
Version Info:
0: [No Data]

Midie.99463 also known as:

Bkav	W32.AIDetect.malware2
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Midie.99463
FireEye	Generic.mg.743f2c6956e2395a
McAfee	GenericRXGR-WB!743F2C6956E2
Cylance	Unsafe
Sangfor	[ARMADILLO V1.71]
K7AntiVirus	Trojan ( 00521b151 )
BitDefender	Gen:Variant.Midie.99463
K7GW	Trojan ( 00521b151 )
Cybereason	malicious.956e23
BitDefenderTheta	Gen:NN.ZexaF.34638.xqW@aKEoGudb
Cyren	W32/BlackMoon.J.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
tehtris	Generic.Malware
ESET-NOD32	a variant of Win32/Packed.BlackMoon.A potentially unwanted
APEX	Malicious
ClamAV	Win.Dropper.Tiggre-9845940-0
Kaspersky	HEUR:Trojan.Win32.Generic
NANO-Antivirus	Trojan.Win32.Blamon.fkevnn
Rising	Trojan.Blamon!8.E8FB (C64:YzY0Op2aHzhBMaIft3APkvmzYqg)
Ad-Aware	Gen:Variant.Midie.99463
Emsisoft	Gen:Variant.Midie.99463 (B)
Comodo	TrojWare.Win32.Zegost.D@6vpf1l
DrWeb	Trojan.Siggen8.14802
Zillya	Trojan.Blamon.Win32.358
McAfee-GW-Edition	BehavesLike.Win32.Injector.fh
Sophos	Mal/Generic-S
Ikarus	Trojan.ATRAPS
GData	Win32.Trojan-Stealer.BlackMoon.D
Jiangmin	Trojan.Generic.cwkyf
Avira	HEUR/AGEN.1228016
MAX	malware (ai score=88)
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
Cynet	Malicious (score: 100)
AhnLab-V3	Malware/Win32.Generic.C2696316
VBA32	Trojan.Blamon
ALYac	Gen:Variant.Midie.99463
TACHYON	Trojan/W32.Agent.380928.ABE
Malwarebytes	Trojan.BlackMoon
Panda	Trj/Genetic.gen
Tencent	Malware.Win32.Gencirc.10b3b598
Yandex	Trojan.GenAsa!OdQBpwk4c3M
SentinelOne	Static AI – Suspicious PE
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/CoinMiner.ESFJ!tr
AVG	Win32:TrojanX-gen [Trj]
Avast	Win32:TrojanX-gen [Trj]
CrowdStrike	win/malicious_confidence_70% (W)