Kazy.24663 (file analysis)

The Kazy.24663 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Kazy.24663 virus can do?

At least one process apparently crashed during execution
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Kazy.24663?


File Info:
name: CA783D5695AE3E3DA2FD.mlw
path: /opt/CAPEv2/storage/binaries/7797c626d0df5a0fe5f5dba75dfc29141e0fed9d5a058d973e898ccb350d9f37
crc32: 07BFA440
md5: ca783d5695ae3e3da2fd6989df3bfc2b
sha1: 0f5c681a4467a0d15722e6ebebb9a254040c4e99
sha256: 7797c626d0df5a0fe5f5dba75dfc29141e0fed9d5a058d973e898ccb350d9f37
sha512: c66404d811024d3ce79624746426a62bbf9ec870db56ee62e315df37d9b90d1a4fb53db6ab327d84932a0c531719c25af12ee55afacada9d9204e24dc97ebad0
ssdeep: 6144:5XbP1VEdlOcJRccPn94WZowJuWzHmPp7MMMMMMDnTMMMMMMQMMMMMMVMMMMMM1M0:pbQXJcanfD8WzGPp7MMMMMM/MMMMMMQX
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T118643AC3F3E0E653C059237A4A9A86A976295F36EC96DDE54B00FD6CDEF81C02953C90
sha3_384: 8bb2635225ad0b032eb65a44888bb1d5053f001af72b8281852a98ed0f60518c8d2dfa653724f76015e1a29e83b9d2cf
ep_bytes: 8b0d3c0043008b3d9937440023f9890d
timestamp: 2011-03-19 18:02:12

Version Info:
CompanyName: Mach5 Software
FileDescription: Huge Dwarf Furs
FileVersion: 5.4
InternalName: Bran Freer Trap
LegalCopyright: Calico 1999-2007
OriginalFilename: 3bfpjy8usy.exe
ProductName: Sex
ProductVersion: 5.4
Translation: 0x0409 0x04b0

Kazy.24663 also known as:

Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
FireEye	Generic.mg.ca783d5695ae3e3d
CAT-QuickHeal	TrojanPWS.Zbot.Y
McAfee	Artemis!CA783D5695AE
Cylance	Unsafe
VIPRE	Trojan.Win32.Reveto.D (v)
Sangfor	Trojan.Win32.Generic.ky
CrowdStrike	win/malicious_confidence_90% (W)
Alibaba	Trojan:Win32/Kryptik.e8a54cc2
K7GW	Trojan ( 0035c0fe1 )
K7AntiVirus	Trojan ( 0035c0fe1 )
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Kryptik.AJRF
APEX	Malicious
Paloalto	generic.ml
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Gen:Variant.Kazy.24663
NANO-Antivirus	Trojan.Win32.MlwGen.efbehj
SUPERAntiSpyware	Trojan.Agent/Gen-Faker[desc]
MicroWorld-eScan	Gen:Variant.Kazy.24663
Avast	Win32:Reveton-Y [Trj]
Tencent	Win32.Trojan.Crypt.Szvc
Ad-Aware	Gen:Variant.Kazy.24663
Emsisoft	Gen:Variant.Kazy.24663 (B)
Zillya	Trojan.Foreign.Win32.3266
TrendMicro	TROJ_FRS.0NA103BL20
McAfee-GW-Edition	BehavesLike.Win32.Generic.fh
Sophos	Mal/Generic-R + Mal/EncPk-ABFO
SentinelOne	Static AI – Malicious PE
Jiangmin	Trojan.Generic.xtkm
Webroot	W32.Malware.Gen
Avira	TR/Crypt.EPACK.Gen2
MAX	malware (ai score=100)
Antiy-AVL	Trojan/Win32.AGeneric
Kingsoft	Win32.Troj.Undef.(kcloud)
Microsoft	Trojan:Win32/Dynamer!ac
ZoneAlarm	HEUR:Trojan.Win32.Generic
GData	Gen:Variant.Kazy.24663
AhnLab-V3	Trojan/Win32.HDC.C567866
BitDefenderTheta	Gen:NN.ZexaF.34212.tG0@a4@Skfli
ALYac	Gen:Variant.Kazy.24663
VBA32	BScope.Trojan.Dynamer
TrendMicro-HouseCall	TROJ_FRS.0NA103BL20
Rising	Trojan.Kryptik!8.8 (CLOUD)
Yandex	Trojan.GenAsa!k7ZlKSI6LVI
Ikarus	Trojan.Win32.Ransom
Fortinet	W32/Kryptik.ABC!tr
AVG	Win32:Reveton-Y [Trj]
Cybereason	malicious.695ae3
Panda	Bck/Qbot.AO

How to remove Kazy.24663?

Kazy.24663 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X