Mikey.133373 (file analysis)

The Mikey.133373 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Mikey.133373 virus can do?

• Behavioural detection: Executable code extraction – unpacking
• Yara rule detections observed from a process memory dump/dropped files/CAPE
• HTTPS urls from behavior.
• CAPE extracted potentially suspicious content
• Unconventionial language used in binary resources: Spanish (Argentina)
• The binary likely contains encrypted or compressed data.
• Authenticode signature is invalid
• Behavioural detection: Injection (Process Hollowing)
• Behavioural detection: Injection (inter-process)
• Behavioural detection: Transacted Hollowing
• CAPE detected the STOP malware family
• Attempts to modify proxy settings
• Creates a copy of itself
• Creates a known STOP ransomware variant mutex
• STOP ransomware command line behavior detected
• Uses suspicious command line tools or Windows utilities

How to determine Mikey.133373?

File Info:
name: 7AD63338F41D2B3718B5.mlw
path: /opt/CAPEv2/storage/binaries/cb17c7a76d653c02277195c59aff8a3bfc2fa49fba9097f3154d79c5230e2f8b
crc32: 879EFCC1
md5: 7ad63338f41d2b3718b5a9ad16ed29f0
sha1: d96003a104da00ed3931784f7532451708437be4
sha256: cb17c7a76d653c02277195c59aff8a3bfc2fa49fba9097f3154d79c5230e2f8b
sha512: e740bbc7b18be93347b1defccc083399e6c9a1699850bddfd49a972a6ffa49bb30ade8d5089b8dc3220ce79e91043717edc8e352cb47e6e5ca563e6d07441db6
ssdeep: 24576:PB8Qx1I0Leet4YZbHT+cagN0lXfBhcGX:PX1zH4YT+cagYvBhp
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1EC0512317AD8F43AC5630AB68D21B6905E7ABC7126E4415B3361436F5F70FAC0AE271E
sha3_384: ef99196328a0baa4eeea851ff48845eafbf4773317dfbf285b3faa4422d0ffa65486eeddfcdea9fe259abe5afc7e4b67
ep_bytes: e8cc4d0000e979feffffcccccccccccc
timestamp: 2020-07-18 17:25:18

Version Info:
InternationalName: bomgvioci.iwa
Copyright: Copyrighz (C) 2021, fudkort
ProjectVersion: 3.14.70.17
Translation: 0x0129 0x0794

Mikey.133373 also known as:

How to remove Mikey.133373?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.