About “Lazy.113148” infection

The Lazy.113148 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Lazy.113148 virus can do?

The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Lazy.113148?


File Info:
name: 648593BC8E7AFDD1C352.mlw
path: /opt/CAPEv2/storage/binaries/30f15fbdf413f73fbd04b19dabac398ca035273a9e77c5b65ffb200fd7b72322
crc32: EF1233BB
md5: 648593bc8e7afdd1c3520bb3c2e48a55
sha1: 822580ac3dc3c63fe9d68a911d8015dfb2695dfd
sha256: 30f15fbdf413f73fbd04b19dabac398ca035273a9e77c5b65ffb200fd7b72322
sha512: 0b976c628476ae4128959fc26900307666fa3cb53d95e3a03b491ce7f6cf09ba3048ebdc7fbbc8b187ed1afe877328669f5baf43311663e6742a9c8bc00cc24a
ssdeep: 6144:K/IqLLxj+gEkUTt2woU/IqLLxj+p3oEm2+Jzf6WI5uOvOYOhODOXOYOzODOaOpOL:+L1akUJ2wRL1K3owWBw4
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1F5844A12966C9052C66A07B05F35E866EE3DFF360900DF0B53D4BBFE1DB97406E1A226
sha3_384: 1ec5445ee9d8de09eccc8487633ba80054778206b44fd138fcaf9f9df0402564681bd9ba63b77ee6e594d2c4b7f93c6a
ep_bytes: 73570090909053657454687265616455
timestamp: 2018-02-07 22:45:06

Version Info:
0: [No Data]

Lazy.113148 also known as:

Bkav	W32.AIDetect.malware1
Lionic	Trojan.Win32.Malicious.4!c
Elastic	malicious (high confidence)
DrWeb	Win32.HLLW.Autoruner.547
MicroWorld-eScan	Gen:Variant.Lazy.113148
FireEye	Gen:Variant.Lazy.113148
McAfee	GenericRXRP-UE!648593BC8E7A
Malwarebytes	MachineLearning/Anomalous.95%
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_90% (W)
Cyren	W32/Ipamor.AW.gen!Eldorado
ClamAV	Win.Malware.Genpack-9877676-0
BitDefender	Gen:Variant.Lazy.113148
Avast	Win32:TrojanX-gen [Trj]
Sophos	Generic ML PUA (PUA)
McAfee-GW-Edition	BehavesLike.Win32.Generic.fh
SentinelOne	Static AI – Malicious PE
Emsisoft	Gen:Variant.Lazy.113148 (B)
Ikarus	Trojan.Autorun
GData	Gen:Variant.Lazy.113148
Jiangmin	Packed.Krap.gvvx
Antiy-AVL	Trojan/Generic.ASMalwS.316A36D
Gridinsoft	Ransom.Win32.Sabsik.sa
Microsoft	Trojan:Script/Phonzy.C!ml
Cynet	Malicious (score: 100)
VBA32	Backdoor.Swz
ALYac	Gen:Variant.Barys.136108
Cylance	Unsafe
APEX	Malicious
Rising	Trojan.Kryptik!1.B239 (CLOUD)
MAX	malware (ai score=83)
Fortinet	W32/Ipamor.AW!tr
AVG	Win32:TrojanX-gen [Trj]

How to remove Lazy.113148?

Lazy.113148 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X