Categories: Malware

What is “Mikey.117804”?

The Mikey.117804 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Mikey.117804 virus can do?

Sample contains Overlay data
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
Authenticode signature is invalid
CAPE detected the shellcode get eip malware family
Anomalous binary characteristics
Yara detections observed in process dumps, payloads or dropped files

How to determine Mikey.117804?


File Info:
name: 00A30B93371B6B7F43AF.mlwpath: /opt/CAPEv2/storage/binaries/e68c8d0e1fc82eddc8818976f7199a99c496ae0ee63ce41262e5e31dd0d1404ecrc32: 2114AEC6md5: 00a30b93371b6b7f43af3ac753591877sha1: 8710cfb4ae10e37eec85d69ef6993f81a715f05asha256: e68c8d0e1fc82eddc8818976f7199a99c496ae0ee63ce41262e5e31dd0d1404esha512: 5d0f9563cd3c3259f008fb59759c9418c80b3389b012328cf94850a5f89cf42588a2a14acc6dd8b5b8fc7e378fe9898ad2757ea640f3886365614ffc596f6c5fssdeep: 12288:x8wzaBheJ8kIzYtm/eyz/mYDTInqSjQEMbTJ:x8wzaTeJ8kI66/mATInNQTtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1D1C4F813B111C0A6D0253AF266A6173C78F8472528B9C923EFD8DDA67CB4633DB2B51Dsha3_384: d1c55b8aeb7caf982c7f3e435f06831c5117ba6576cd074464a2ea32ce2768de61257b62933219fe4db1ddf694742a79ep_bytes: 558bec6aff68986e4700686c20460064timestamp: 2019-11-18 08:13:48
Version Info:
Translation: 0x0804 0x04b0

Mikey.117804 also known as:

Lionic	Trojan.Win32.Zusy.4!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Mikey.117804
FireEye	Generic.mg.00a30b93371b6b7f
Skyhigh	BehavesLike.Win32.Infected.hh
McAfee	GenericRXAA-AA!00A30B93371B
Cylance	unsafe
Zillya	Trojan.BlackMoon.Win32.13
Sangfor	Trojan.Win32.Save.BlackMoon
CrowdStrike	win/malicious_confidence_90% (W)
Alibaba	Trojan:Win32/GenKryptik.4745c31a
K7GW	Trojan ( 005931081 )
K7AntiVirus	Trojan ( 005931081 )
Arcabit	Trojan.Mikey.D1CC2C
BitDefenderTheta	Gen:NN.ZexaF.36744.HqX@aidsbakb
Symantec	ML.Attribute.HighConfidence
tehtris	Generic.Malware
ESET-NOD32	a variant of Win32/Packed.BlackMoon.A suspicious
Cynet	Malicious (score: 100)
APEX	Malicious
ClamAV	Win.Malware.Zusy-9819756-0
BitDefender	Gen:Variant.Mikey.117804
NANO-Antivirus	Trojan.Win32.Gen3.hsqqbw
Avast	Win32:TrojanX-gen [Trj]
Tencent	Malware.Win32.Gencirc.11b9547a
Emsisoft	Gen:Variant.Mikey.117804 (B)
F-Secure	Trojan.TR/Spy.Gen3
VIPRE	Gen:Variant.Mikey.117804
Sophos	Troj/Agent-BGHZ
SentinelOne	Static AI – Malicious PE
Jiangmin	Trojan/Cosmu.owg
Varist	W32/S-7457c55c!Eldorado
Avira	TR/Spy.Gen3
Antiy-AVL	Trojan/Win32.GenKryptik
Kingsoft	malware.kb.a.741
Xcitium	Malware@#3aixytur02l63
Microsoft	Trojan:Win32/Tiggre!rfn
GData	Win32.Trojan-Stealer.BlackMoon.D
Google	Detected
AhnLab-V3	Trojan/Win32.Zusy.C4250812
VBA32	BScope.Trojan.Agent
ALYac	Gen:Variant.Mikey.117804
MAX	malware (ai score=86)
Malwarebytes	Generic.Malware.AI.DDS
Panda	Trj/Genetic.gen
Rising	Trojan.GenKryptik!8.AA55 (TFE:5:uMNJXCL8lEQ)
Yandex	Riskware.BlackMoon!RvzERYCDuAQ
Ikarus	AdWare.Win32.BlackMoon
MaxSecure	Trojan.Malware.12229157.susgen
Fortinet	W32/CoinMiner.ESFJ!tr
AVG	Win32:TrojanX-gen [Trj]
Cybereason	malicious.4ae10e
DeepInstinct	MALICIOUS