Categories: Malware

What is “Mikey.110126 (B)”?

The Mikey.110126 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Mikey.110126 (B) virus can do?

Attempts to connect to a dead IP:Port (1 unique times)
Presents an Authenticode digital signature
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
The binary likely contains encrypted or compressed data.
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

www.zuhaowan.com

a.tomx.xyz

How to determine Mikey.110126 (B)?


File Info:
crc32: 6EC07FEAmd5: 70c726bb1949575f46a6eb0453dce42ename: zhw_5.4.417.1_online.exesha1: 17bb883dcdbdf70de2044bc98a73727201e2bc19sha256: a01906d979100c69aa0fb9add389f3d320f9a3712f909ba9da547ab80f77ce3bsha512: 13d051aab0d953515a9e04c9c32e87cd1027682844bb3d935579efcc32204a550b7334adf2a0c1505bc6771bc9dc469021223e43c8c93156d90e902a900277c0ssdeep: 24576:MB4g1KC0cdTTFWA+FtYJNrw+hDfZcoxOOjg1i0C0:MSFATToA+h6hVPP0C0type: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
LegalCopyright: Copyright xa9 daofeng. All Rights Reserved.InternalName: loaderFileVersion: 5, 4, 414, 2CompanyName: x5200x950bx7f51x7edcComments:                                                                                                     ProductName: zuhaowanProductVersion: 5, 4, 414, 2FileDescription: x79dfx53f7x73a9x63a8x5e7fx5728x7ebfx5b89x88c5x5305OriginalFilename: loader.exeTranslation: 0x0804 0x04b0

Mikey.110126 (B) also known as:

Bkav	W32.AIDetectVM.malware2
MicroWorld-eScan	Gen:Variant.Mikey.110126
Qihoo-360	Generic/Trojan.3c9
McAfee	Artemis!70C726BB1949
Cylance	Unsafe
AegisLab	Trojan.Win32.Mikey.4!c
K7AntiVirus	Riskware ( 0040eff71 )
BitDefender	Gen:Variant.Mikey.110126
K7GW	Riskware ( 0040eff71 )
Cybereason	malicious.dcdbdf
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:TrojanX-gen [Trj]
GData	Gen:Variant.Mikey.110126
Rising	PUA.CoinMiner!8.4639 (CLOUD)
Ad-Aware	Gen:Variant.Mikey.110126
Emsisoft	Gen:Variant.Mikey.110126 (B)
McAfee-GW-Edition	BehavesLike.Win32.Spyware.tc
Cyren	W32/Trojan.SSGE-4684
Webroot	W32.Trojan.Gen
MAX	malware (ai score=87)
Antiy-AVL	GrayWare/Win32.CoinMiner
Arcabit	Trojan.Mikey.D1AE2E
Microsoft	PUA:Win32/CoinMiner
BitDefenderTheta	Gen:NN.ZexaF.34108.lnMfaSDnX@gj
ALYac	Gen:Variant.Mikey.110126
VBA32	BScope.Trojan.Wofith
TrendMicro-HouseCall	TROJ_GEN.R002H09EB20
SentinelOne	DFI – Malicious PE
AVG	Win32:TrojanX-gen [Trj]
Paloalto	generic.ml
CrowdStrike	win/malicious_confidence_60% (W)
MaxSecure	Trojan.Malware.76926142.susgen