What is “Tedy.59679”?

The Tedy.59679 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Tedy.59679 virus can do?

Dynamic (imported) function loading detected
.NET file is packed/obfuscated with SmartAssembly
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Tedy.59679?


File Info:
name: C31F024BD87BE7580840.mlw
path: /opt/CAPEv2/storage/binaries/062237a680578e1a2b1bc968b97070c074cebe5b0bb1f324bd4c9c6f654e1059
crc32: 241796D3
md5: c31f024bd87be75808404dacce729ddd
sha1: 728cf95279d9346e69583afffbf0770a24db94a7
sha256: 062237a680578e1a2b1bc968b97070c074cebe5b0bb1f324bd4c9c6f654e1059
sha512: 86518289163b03a993397febc495f9a47a279b3ffb1a8bc78fd73ed3ed3f8f09c5b4f46f6b8c3a19348e05207745270699f8801291705e4431b7c72e83a5a124
ssdeep: 3072:+sSw20fuR0reddeG51WXVspVVAW39RWq0obCc8u5SS67:+9HCsDVL3mICkl67
type: PE32+ executable (GUI) x86-64, for MS Windows
tlsh: T162C42BD13B5AA565D39B12B5C0321221DFF096F2A15ABF6B31482DED3986783C3993C3
sha3_384: f4cfee42c62f0e26d3fb286812284fd30745dd26f7cca6acb730ea82764d8e1d15b6c8dc1d5cdcb00a276437243e2259
ep_bytes: 4d5a90000300000004000000ffff0000
timestamp: 2021-12-02 05:53:19

Version Info:
Translation: 0x0000 0x04b0
Comments: 
CompanyName: 
FileDescription: Krash
FileVersion: 1.0.0.0
InternalName: Krash.exe
LegalCopyright: Copyright ©  2021
LegalTrademarks: 
OriginalFilename: Krash.exe
ProductName: Krash
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

Tedy.59679 also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Tedy.59679
FireEye	Gen:Variant.Tedy.59679
McAfee	Artemis!C31F024BD87B
ESET-NOD32	a variant of MSIL/TrojanDropper.Agent.DNX
TrendMicro-HouseCall	TROJ_GEN.R014C0WL721
Kaspersky	UDS:Trojan.Multi.GenericML.xnet
BitDefender	Gen:Variant.Tedy.59679
Avast	FileRepMalware
Ad-Aware	Gen:Variant.Tedy.59679
TrendMicro	TROJ_GEN.R014C0WL721
McAfee-GW-Edition	Artemis
Emsisoft	Gen:Variant.Tedy.59679 (B)
SentinelOne	Static AI – Malicious PE
GData	Gen:Variant.Tedy.59679
Avira	HEUR/AGEN.1142919
MAX	malware (ai score=86)
Arcabit	Trojan.Tedy.DE91F
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
Cynet	Malicious (score: 99)
ALYac	Gen:Variant.Tedy.59679
Malwarebytes	Malware.AI.1797080504
APEX	Malicious
Ikarus	Trojan-Dropper.MSIL.Binder
eGambit	Unsafe.AI_Score_99%
Fortinet	PossibleThreat
AVG	FileRepMalware

How to remove Tedy.59679?

Tedy.59679 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X