Lazy.252997 (file analysis)

The Lazy.252997 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Lazy.252997 virus can do?

Sample contains Overlay data
Presents an Authenticode digital signature
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Lazy.252997?


File Info:
name: 8F10BF59489B4F182659.mlw
path: /opt/CAPEv2/storage/binaries/c12213b0c6e8f4f8688df0b1c93cb264201476650561edebbf39ec0c9f92cc47
crc32: F305154C
md5: 8f10bf59489b4f182659f1c8fbf15e5c
sha1: 9a1c8271a562df8784fdce5303c189e43f896530
sha256: c12213b0c6e8f4f8688df0b1c93cb264201476650561edebbf39ec0c9f92cc47
sha512: e01a464a618a9cdb65b58a3ebbb696ace7a2e43bce552a790a4838ce426de1e91c3406583f633bd76b258761b39984bfdda99a5bfbc52ba39474d7387aab5b0c
ssdeep: 12288:inxhF2inU4feoQ/go30UC/rTw/mEi5UskMcR4cOOFiBBzuJBphu5lqX:qZ2inrfeoQ/OEiyxhR41BBpyX
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T128D49E2139C18076DA73343249A9E6B44ABEB8311B2286DF63C81A7E5F745F17E3513B
sha3_384: 47aada0a3c0f4350bc0462912a7aa7aef6a4472b23208787221faf6a3aef8a8be2bf135c7626ff92d8fa912a1c326b82
ep_bytes: e8830a0000e917feffff558bec8b4508
timestamp: 2022-10-08 14:31:12

Version Info:
0: [No Data]

Lazy.252997 also known as:

Elastic	malicious (moderate confidence)
McAfee	Artemis!8F10BF59489B
Cylance	Unsafe
K7AntiVirus	Trojan ( 00597f681 )
K7GW	Trojan ( 00597f681 )
Symantec	ML.Attribute.HighConfidence
Paloalto	generic.ml
Kaspersky	HEUR:Trojan-Spy.Win32.Stealer.gen
BitDefender	Gen:Variant.Lazy.252997
Avast	CrypterX-gen [Trj]
Tencent	Win32.Trojan.FalseSign.Vylw
McAfee-GW-Edition	Artemis!Trojan
Trapmine	suspicious.low.ml.score
Ikarus	Trojan.Win32.RedlineStealer
GData	Gen:Variant.Lazy.252997
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
Google	Detected
Rising	Backdoor.Bladabindi!8.B1F (TFE:5:GwKlmU3CP4U)
MaxSecure	Backdoor.W32.Mokes.gen_242962
AVG	CrypterX-gen [Trj]

How to remove Lazy.252997?

Lazy.252997 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X