What is “Lazy.322615”?

The Lazy.322615 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Lazy.322615 virus can do?

Sample contains Overlay data
The binary contains an unknown PE section name indicative of packing
The executable is compressed using UPX
Authenticode signature is invalid

How to determine Lazy.322615?


File Info:
name: DDCFECF11E6D90F7778D.mlw
path: /opt/CAPEv2/storage/binaries/a32cf1812b486283439c1dee9133e674c9bd6c7add693d563f51653163a07076
crc32: ED05BF36
md5: ddcfecf11e6d90f7778dcb737b05e5b4
sha1: 75cc5aad0695c55ceae08b3008deb871e92b5fb5
sha256: a32cf1812b486283439c1dee9133e674c9bd6c7add693d563f51653163a07076
sha512: fee473766bbfe180543a5961750b0d408e2bee97a0a15b63a1e156ef0bc4caa0cb7a183ec2d7fdc129ea965431646112b17dba7d9b21bf6efb9da772cd45618f
ssdeep: 12288:5RBk7MpC7tYR4eYLExiw4PKEgOHS1ZBvKEjGbCvlLvq7vO:5FQeYL+KKEPS1bvKE28vqb
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1AF05AF12F5D68073C69232B1CE7EF77A973DB53B0323D2DB27C81D355E905426A2A262
sha3_384: 0ee7b710a0fdd8eab901c36fff9c63b95ee752316d9f28d0d2afd390227394fdfb5dee81e92a2b429679579a2c0c9012
ep_bytes: 5053e85a78feff8b550883c41485c075
timestamp: 2012-04-10 00:11:21

Version Info:
0: [No Data]

Lazy.322615 also known as:

Bkav	W32.AIDetectMalware
Elastic	malicious (moderate confidence)
MicroWorld-eScan	Gen:Variant.Lazy.322615
Skyhigh	BehavesLike.Win32.Generic.cm
Malwarebytes	Generic.Malware.AI.DDS
Cybereason	malicious.d0695c
Arcabit	Trojan.Lazy.D4EC37
BitDefenderTheta	AI:Packer.F34D2C0D1E
Symantec	ML.Attribute.HighConfidence
Cynet	Malicious (score: 100)
APEX	Malicious
ClamAV	Win.Dropper.DarkKomet-9986221-0
BitDefender	Gen:Variant.Lazy.322615
Emsisoft	Gen:Variant.Lazy.322615 (B)
VIPRE	Gen:Variant.Lazy.322615
Trapmine	malicious.high.ml.score
FireEye	Generic.mg.ddcfecf11e6d90f7
Sophos	Generic ML PUA (PUA)
SentinelOne	Static AI – Malicious PE
MAX	malware (ai score=82)
Antiy-AVL	Trojan/Win32.Wacatac
Kingsoft	malware.kb.b.941
Microsoft	Program:Win32/Wacapew.C!ml
GData	Gen:Variant.Lazy.322615
Google	Detected
ALYac	Gen:Variant.Lazy.322615
Cylance	unsafe
MaxSecure	Trojan.Malware.300983.susgen
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_100% (D)

How to remove Lazy.322615?

Lazy.322615 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X