Categories: Malware

Lazy.261534 malicious file

The Lazy.261534 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Lazy.261534 virus can do?

Sample contains Overlay data
Yara rule detections observed from a process memory dump/dropped files/CAPE
Reads data out of its own binary image
CAPE extracted potentially suspicious content
Authenticode signature is invalid
Exhibits possible ransomware file modification behavior
Anomalous binary characteristics

How to determine Lazy.261534?


File Info:
name: A6A2A692FFBF9E66B66A.mlwpath: /opt/CAPEv2/storage/binaries/91cbbdb6d89fc2fc31539d978a83c128972bd3002922f771022378672e0a5577crc32: 11788A1Amd5: a6a2a692ffbf9e66b66a1262057e150asha1: 46db58fc01114301b34fc09ff900be79c0dd912bsha256: 91cbbdb6d89fc2fc31539d978a83c128972bd3002922f771022378672e0a5577sha512: 50a593ac2004df88c8b445c92d13e0faf855089a89660c99b51ea4f049dbd47fd1d60f3c5ad1f9324401b01176fceed010274c8e791680f87133a42402fca116ssdeep: 12288:tijXFoM8iGS28hOs9/p9aUz26vkILglbn:toF3thpM+2pzlbntype: PE32+ executable (GUI) x86-64, for MS Windowstlsh: T1C0849D6273D819E4F877963AC9768A11D5B23C565B71C3CF13A0264A2F33BD08D39B26sha3_384: 743be6dd7ae35590a3bf03ada4ac83dbc31370eb10bd0582b0ff37e5514ff2f6dc0f2892a2e763e44156a241f35084efep_bytes: e848feffffc82000004c897c24f84883timestamp: 2017-07-22 05:15:32
Version Info:
CompanyName: Oracle CorporationFileDescription: Java(TM) Web Start LauncherFileVersion: 11.144.2.01Full Version: 11.144.2.01InternalName: Java(TM) Web Start LauncherLegalCopyright: Copyright © 2017OriginalFilename: javaws.exeProductName: Java(TM) Platform SE 8 U144ProductVersion: 8.0.1440.1Translation: 0x0000 0x04b0

Lazy.261534 also known as:

Lionic	Trojan.Win32.Crypmodng.tsaK
Elastic	malicious (moderate confidence)
MicroWorld-eScan	Gen:Variant.Lazy.261534
McAfee	Artemis!A6A2A692FFBF
Cylance	Unsafe
VIPRE	Gen:Variant.Lazy.261534
Sangfor	Ransom.Win64.Filecoder.Vat5
CrowdStrike	win/malicious_confidence_60% (W)
Alibaba	Ransom:Win64/AzovCrypt.f51c8c42
K7GW	Trojan ( 0059aa0b1 )
K7AntiVirus	Trojan ( 0059aa0b1 )
Cyren	W64/Ipamor.A
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	Win64/Filecoder.GG
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	HEUR:Trojan-Ransom.Win32.Blocker.pef
BitDefender	Gen:Variant.Lazy.261534
Avast	Win64:Trojan-gen
Ad-Aware	Gen:Variant.Lazy.261534
TACHYON	Ransom/W64.Blocker.400741
Sophos	Troj/Azov-A
DrWeb	Win32.HLLP.Azov.2
TrendMicro	Ransom.Win64.AZVO.SMYXCJ5
McAfee-GW-Edition	BehavesLike.Win64.BadFile.fh
FireEye	Gen:Variant.Lazy.261534
Emsisoft	Gen:Variant.Lazy.261534 (B)
GData	Gen:Variant.Lazy.261534
Jiangmin	Trojan.Blocker.urx
Antiy-AVL	GrayWare/Win32.Filecoder.gg
Arcabit	Trojan.Lazy.D3FD9E
Microsoft	Ransom:Win64/AzovCrypt.PA!MTB
Google	Detected
AhnLab-V3	Trojan/Win.Generic.R533023
ALYac	Gen:Variant.Lazy.261534
MAX	malware (ai score=87)
Rising	Ransom.Agent!8.6B7 (TFE:2:U9tOTBNOHOO)
Ikarus	Trojan-Ransom.FileCrypter
MaxSecure	Trojan.Malware.121218.susgen
Fortinet	W64/Filecoder.GG!tr
AVG	Win64:Trojan-gen
Panda	Trj/CI.A