Lazy.328293 (file analysis)

The Lazy.328293 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Lazy.328293 virus can do?

• Behavioural detection: Executable code extraction – unpacking
• Sample contains Overlay data
• Reads data out of its own binary image
• CAPE extracted potentially suspicious content
• The binary contains an unknown PE section name indicative of packing
• The binary likely contains encrypted or compressed data.
• Authenticode signature is invalid
• Attempts to modify proxy settings
• Creates a copy of itself
• Deletes executed files from disk
• Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Lazy.328293?

File Info:
name: B8D5CDF25710E50A428F.mlw
path: /opt/CAPEv2/storage/binaries/3560563f1f0dd5c36b8c4b1a42d1384d852f7c16b29fe974e5e71239e021e094
crc32: 93EAD126
md5: b8d5cdf25710e50a428fec4fd5e4e348
sha1: 9c0f5b75bfaf07411ec36871f4e38b580f8bcad1
sha256: 3560563f1f0dd5c36b8c4b1a42d1384d852f7c16b29fe974e5e71239e021e094
sha512: ea41ee06661defcedb6b07c1539f5fb46d451d5e62de9312b7b768ffe685d8c85aee7e6a95b41d8c4edf8967e19fb1ee892298807aa2e97468141466d4bc2109
ssdeep: 24576:NXMkzxK2hNjkFr1NbNhMpEZH5vk51Ea/ZSE0E77sFZTDleyVVv:hhfToV8kgl0EghcyVVv
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T18155D08D13DC0203D419123EAB6EDE9EA262B83CB577F2B03525718B7731B759D4EA21
sha3_384: ea1e0ed5649a03acac3f559f0daa96f37db75257447ec5a3b6eb338086f8f5fe2dcb8f003cf02de80c7848f9325896ce
ep_bytes: 83529571d33b11f6d6da1867549070dd
timestamp: 1971-05-16 00:00:00

Version Info:
0: [No Data]

Lazy.328293 also known as:

How to remove Lazy.328293?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.