Categories: Malware

What is “Lazy.208449”?

The Lazy.208449 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Lazy.208449 virus can do?

Behavioural detection: Executable code extraction – unpacking
Reads data out of its own binary image
CAPE extracted potentially suspicious content
Authenticode signature is invalid
Creates a copy of itself
Anomalous binary characteristics
Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Lazy.208449?


File Info:
name: 5C26FA328CF480FD4E32.mlwpath: /opt/CAPEv2/storage/binaries/bda91b4ee2246560143ac2f1b68b639427d47ff53486735687dd9c6502ec66c2crc32: CA0A83ECmd5: 5c26fa328cf480fd4e324dfece65a03bsha1: 7b0962f03832285e4038b3f418859332a4604504sha256: bda91b4ee2246560143ac2f1b68b639427d47ff53486735687dd9c6502ec66c2sha512: 60c9c41aecf93075e63dd9bca65e40564e226217004a4a0571490c399de19cb9cf2f842847ae61f1ab7c43019982558be44fef6e1f2555b9cc49e5fd0651a2ecssdeep: 3072:cBtHeiQ5OMlwPFIi2p02+nNzET3ankVKBHVl1X69udmmj/Ubb7QMZQ3:cTEHaPF0/klkVAlNBdbr+ctype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1EF1401E1E4ED8DA3E8378F391275416691B5E06B933A0E2A7E8407683EF51C144ADFCDsha3_384: 594da0ffd783a3c91547530f3f0d42f5cbcf750059d2551062456bdaa84bf52146264e877b350d0574fb531d05e0f324ep_bytes: 89ca89caba2a2d0300f7c214fe020085timestamp: 2008-03-30 12:49:35
Version Info:
FileDescription: MS ShellFileVersion: 1, 0, 0, 1InternalName: c2LegalCopyright: Copyright (C) 2010OriginalFilename: c2.exePrivateBuild: 1058ProductName: GsoftProductVersion: 1, 0, 0, 1Translation: 0x0409 0x04b0

Lazy.208449 also known as:

Bkav	W32.AIDetectMalware
Lionic	Hacktool.Win32.Krap.x!c
MicroWorld-eScan	Gen:Variant.Lazy.208449
CAT-QuickHeal	Backdoor.Cycbot.B
ALYac	Gen:Variant.Lazy.208449
Cylance	unsafe
VIPRE	Gen:Variant.Lazy.208449
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Riskware ( 0015e4f01 )
Alibaba	Trojan:Win32/Bulta.8b4f3c8f
K7GW	Riskware ( 0015e4f01 )
CrowdStrike	win/malicious_confidence_100% (D)
Arcabit	Trojan.Lazy.D32E41
VirIT	Trojan.Win32.Buzus.CL
Cyren	W32/Goolbot.A.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/Kryptik.GVQW
APEX	Malicious
ClamAV	Win.Trojan.Agent-447910
Kaspersky	Packed.Win32.Krap.hx
BitDefender	Gen:Variant.Lazy.208449
NANO-Antivirus	Trojan.Win32.Krap.btrna
ViRobot	Trojan.Win32.S.Krap.193536.H
Avast	Win32:MalOb-CF [Cryp]
Rising	Backdoor.Cycbot!8.850 (TFE:1:Iu4jVYwFnRJ)
TACHYON	Trojan/W32.Krap.193536.M
Emsisoft	Gen:Variant.Lazy.208449 (B)
F-Secure	Trojan.TR/Kazy.V
DrWeb	Trojan.DownLoader1.26547
Zillya	Trojan.Kryptik.Win32.77209
TrendMicro	Cryp_CYCBOT-4
McAfee-GW-Edition	BackDoor-EXI
FireEye	Generic.mg.5c26fa328cf480fd
Sophos	Mal/FakeAV-BW
Ikarus	Trojan.Win32.Crypt
Jiangmin	Packed.Krap.dsoc
Webroot	W32.CycBot.Gen
Avira	TR/Kazy.V
Antiy-AVL	Trojan[Packed]/Win32.Krap
Xcitium	Malware@#3r5844q7ri6op
Microsoft	Backdoor:Win32/Cycbot.B
SUPERAntiSpyware	Trojan.Agent/Gen-VerFake
ZoneAlarm	Packed.Win32.Krap.hx
GData	Gen:Variant.Lazy.208449
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win.DownLoader.R541569
McAfee	BackDoor-EXI
MAX	malware (ai score=100)
VBA32	BScope.Backdoor.Gbot
Panda	Generic Malware
TrendMicro-HouseCall	Cryp_CYCBOT-4
Tencent	Win32.Packed.Krap.Qsmw
Yandex	Trojan.GenAsa!sxSigFWtwBI
MaxSecure	Trojan.Malware.1446531.susgen
Fortinet	W32/Kryptik.HDZ!tr
BitDefenderTheta	Gen:NN.ZexaF.36250.lq0@a4r@Vvd
AVG	Win32:MalOb-CF [Cryp]
Cybereason	malicious.28cf48
DeepInstinct	MALICIOUS