Malware

What is “Lazy.322369”?

Malware Removal

The Lazy.322369 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Lazy.322369 virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Sample contains Overlay data
  • Reads data out of its own binary image
  • CAPE extracted potentially suspicious content
  • Drops a binary and executes it
  • Authenticode signature is invalid
  • Behavioural detection: Injection (inter-process)
  • CAPE detected the embedded win api malware family
  • Attempts to disable Windows Auto Updates
  • Anomalous binary characteristics
  • Attempts to modify Explorer settings to prevent hidden files from being displayed
  • Yara detections observed in process dumps, payloads or dropped files

How to determine Lazy.322369?


File Info:

name: 0E6FFFE4A7AC632A8D33.mlw
path: /opt/CAPEv2/storage/binaries/b17dbdcf55304eab5445b01a695877d1b2dd27abcbe9507d3ee2764845622609
crc32: 6A0194A9
md5: 0e6fffe4a7ac632a8d333f559d7fabaa
sha1: 7ab74b4101a34f1b8f17df16de43fa8eb4aec77d
sha256: b17dbdcf55304eab5445b01a695877d1b2dd27abcbe9507d3ee2764845622609
sha512: 2f9ef0c0cbc8e50f55605aa7000f477a2bde726f25a92665431addff38baf1cf2b3b9671e0c13cd0de9aa56b1d28aff0b89355ea1dce90fc71b72d2d5b18a3bc
ssdeep: 1536:FTaEuVU67gccYy53JDAAZpW4oYkguW2z3i6E2wNI7VnHLl7dbE2I1JbZ:AEQU67lguVHLldQ2Ib
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T164C33B67FB464065F98D713027F3C2F61177B80E5B4B610FA3487A6A6E95F004EA8B63
sha3_384: 4492a0d444cc33fc5d77383706fbecbff0f2d1f494d054cca7eed6678196578e3a4fe1108b258af4ff91edd5195438ee
ep_bytes: 68b0124000e8eeffffff000000000000
timestamp: 2007-08-02 20:29:40

Version Info:

0: [No Data]

Lazy.322369 also known as:

BkavW32.AIDetectMalware
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.Lazy.322369
FireEyeGeneric.mg.0e6fffe4a7ac632a
CAT-QuickHealTrojan.Beebone.D
SkyhighBehavesLike.Win32.VBObfus.cm
McAfeeVBObfus.dv
MalwarebytesGeneric.Malware.AI.DDS
SangforSuspicious.Win32.Save.vb
K7AntiVirusEmailWorm ( 003c363a1 )
K7GWEmailWorm ( 003c363a1 )
BitDefenderThetaGen:NN.ZevbaF.36802.hmY@auZ3lNm
SymantecW32.Changeup
ESET-NOD32Win32/Pronny.BO
APEXMalicious
CynetMalicious (score: 100)
KasperskyWorm.Win32.Vobfus.aigl
BitDefenderGen:Variant.Lazy.322369
NANO-AntivirusTrojan.Win32.VB.cnwroo
AvastWin32:VB-ADUS [Trj]
TencentWorm.Win32.Vobfus.hg
TACHYONTrojan/W32.VB-Agent.118784.IK
EmsisoftGen:Variant.Lazy.322369 (B)
BaiduWin32.Worm.Pronny.fg
F-SecureTrojan.TR/Patched.Ren.Gen
DrWebWin32.HLLW.Autoruner1.23780
VIPREGen:Variant.Lazy.322369
Trapminemalicious.moderate.ml.score
SophosMal/SillyFDC-Y
IkarusWorm.Win32.VBNA
GDataGen:Variant.Lazy.322369
JiangminTrojan/Vbobf.b
WebrootW32.Obfuscated.Gen
VaristW32/Agent.IFR.gen!Eldorado
AviraTR/Patched.Ren.Gen
Antiy-AVLWorm/Win32.WBNA.gen
Kingsoftmalware.kb.a.1000
XcitiumTrojWare.Win32.Pronny.bo@4pu4e6
ArcabitTrojan.Lazy.D4EB41
ViRobotWorm.Win32.A.VBNA.81920.NP
ZoneAlarmWorm.Win32.Vobfus.aigl
MicrosoftWorm:Win32/Vobfus.GE
GoogleDetected
AhnLab-V3Trojan/Win.Jorik.R558920
Acronissuspicious
VBA32TScope.Trojan.VB
ALYacGen:Variant.Lazy.322369
MAXmalware (ai score=89)
Cylanceunsafe
PandaW32/Vobfus.GEW.worm
RisingWorm.Win32.Vobfus.aa (CLASSIC)
YandexTrojan.GenAsa!/+pSXeN5h8U
SentinelOneStatic AI – Malicious PE
FortinetW32/VBObfus.AU!tr
AVGWin32:VB-ADUS [Trj]
DeepInstinctMALICIOUS
alibabacloudTrojan:Win/Fake.AZ

How to remove Lazy.322369?

Lazy.322369 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment