Malware

Mikey.127709 (file analysis)

Malware Removal

The Mikey.127709 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Mikey.127709 virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Yara rule detections observed from a process memory dump/dropped files/CAPE
  • CAPE extracted potentially suspicious content
  • Drops a binary and executes it
  • Unconventionial binary language: Chinese (Simplified)
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid

How to determine Mikey.127709?


File Info:

name: 1ABC70A26FC3FD7FF2DC.mlw
path: /opt/CAPEv2/storage/binaries/98e3035712c561ffc67cacd7823c084cb4092008031fa0b4393f474d6df5de45
crc32: DB5192FF
md5: 1abc70a26fc3fd7ff2dc707dfff32cbe
sha1: 5ca26ead489a6ccf18875451c29c12e07aa7969d
sha256: 98e3035712c561ffc67cacd7823c084cb4092008031fa0b4393f474d6df5de45
sha512: 9af050489238fadbb7a97cbecd475b151cbc6e5cc6512cddb32001a933649e55963d7b82f44d9a37578cc4d0d2025666faa711469247c450af0e267ef91e7502
ssdeep: 196608:funhSyB3bTv+8d9Vgj6YfJ/CcwNscWgRdVlPYc:WhJB3bzjdngGYfJ/Fa/Xr
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1C096F137741B4BA7ECF1D9758C920633892588B3D846CB0A9347AB644CFBE24961F35E
sha3_384: 8e4ed1439d32bb92a3d2b269cc6ca4105bfe4b8cd37cb5c69f843715e34a554a3410ae9fb99b053bb3658491e0d28c59
ep_bytes: 558bec6aff6880bdc30068ec3b460064
timestamp: 2022-10-04 06:58:09

Version Info:

FileVersion: 2.0.0.0
FileDescription: 易语言程序
ProductName: 易语言程序
ProductVersion: 2.0.0.0
CompanyName: 主控室
LegalCopyright: 主控室 版权所有
Comments: 本程序使用易语言编写(http://www.eyuyan.com)
Translation: 0x0804 0x04b0

Mikey.127709 also known as:

BkavW32.AIDetect.malware2
tehtrisGeneric.Malware
MicroWorld-eScanGen:Variant.Mikey.127709
CylanceUnsafe
SangforSuspicious.Win32.Save.ins
K7AntiVirusTrojan ( 005246d51 )
K7GWAdware ( 004b8c491 )
Cybereasonmalicious.d489a6
CyrenW32/S-1885075c!Eldorado
SymantecML.Attribute.HighConfidence
Elasticmalicious (high confidence)
ESET-NOD32a variant of Win32/Packed.FlyStudio.AA potentially unwanted
APEXMalicious
BitDefenderGen:Variant.Mikey.127709
Ad-AwareGen:Variant.Mikey.127709
SophosGeneric ML PUA (PUA)
ComodoWorm.Win32.Dropper.RA@1qraug
VIPREGen:Variant.Mikey.127709
McAfee-GW-EditionBehavesLike.Win32.Dropper.rc
Trapminemalicious.high.ml.score
FireEyeGeneric.mg.1abc70a26fc3fd7f
EmsisoftGen:Variant.Mikey.127709 (B)
SentinelOneStatic AI – Malicious PE
GDataWin32.Trojan.PSE.10S0A6W
JiangminBackdoor/Agent.czoo
GoogleDetected
Antiy-AVLTrojan/Generic.ASCommon.FA
ArcabitTrojan.Mikey.D1F2DD
MicrosoftTrojan:Win32/Sabsik.EN.D!ml
CynetMalicious (score: 100)
ALYacGen:Variant.Mikey.127709
MAXmalware (ai score=88)
MalwarebytesTrojan.MalPack.FlyStudio
IkarusTrojan.Win32.MBRlock
MaxSecureDropper.Dinwod.frindll
FortinetW32/FlyStudio.OQE!tr
BitDefenderThetaGen:NN.ZexaF.34698.@t0@aezJ6ylb

How to remove Mikey.127709?

Mikey.127709 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment