Malware

Lazy.328293 information

Malware Removal

The Lazy.328293 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Lazy.328293 virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Sample contains Overlay data
  • Reads data out of its own binary image
  • CAPE extracted potentially suspicious content
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • CAPE detected the shellcode get eip malware family
  • Attempts to modify proxy settings
  • Creates a copy of itself
  • Deletes executed files from disk
  • Yara detections observed in process dumps, payloads or dropped files

How to determine Lazy.328293?


File Info:

name: A49BD0912186416FD6BA.mlw
path: /opt/CAPEv2/storage/binaries/eeb41174844a2df585a935dbd67bd2e8cd8b030bc0722701bafcae24d8faa5e7
crc32: 1DB02DFE
md5: a49bd0912186416fd6baf5770ab76f88
sha1: c6713cf8dc8cc309bf774f44d08c4fa232979e0d
sha256: eeb41174844a2df585a935dbd67bd2e8cd8b030bc0722701bafcae24d8faa5e7
sha512: 34260b6cfd22bc3a14e3659386b66527bdbd4a0bcded9a530e713ed7798a3283cbe52f2f69d3ff903932541d721aed8c6e8c2b2370f2ab01c106e0311a1c9867
ssdeep: 24576:FljGWQ/tqjhTHmJ/xH+mai+LXz4f5Pf1a/ZSE0E77sFZTDleyVVv:FtGJ/tuJcemqq5Pf1gl0EghcyVVv
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T1E255D09C978BC757E0855137FE1ECAD5C252B87863A7E3797660BC6B391138042A2FB0
sha3_384: 489b71492972c1bee739be81157c113ad4a5738262b6e5656bc2e2988b37d6dc8b790380b0cea5f76dafe6a6f0e18fa2
ep_bytes: 721a8bd922730f5e279206cfa5d86e75
timestamp: 1971-05-16 00:00:00

Version Info:

0: [No Data]

Lazy.328293 also known as:

BkavW32.AIDetectMalware
AVGWin32:Evo-gen [Trj]
tehtrisGeneric.Malware
MicroWorld-eScanGen:Variant.Lazy.328293
FireEyeGeneric.mg.a49bd0912186416f
SkyhighBehavesLike.Win32.PWSZbot.tc
McAfeeTrojan-FVOQ!A49BD0912186
MalwarebytesGeneric.Malware.AI.DDS
VIPREGen:Variant.Lazy.328293
SangforTrojan.Win32.Save.a
K7AntiVirusTrojan ( 005a45ef1 )
K7GWTrojan ( 005a45ef1 )
Cybereasonmalicious.121864
SymantecML.Attribute.HighConfidence
Elasticmalicious (high confidence)
ESET-NOD32a variant of Win32/Kryptik_AGen.BGD
CynetMalicious (score: 100)
APEXMalicious
ClamAVWin.Packed.Razy-9836307-0
KasperskyVHO:Trojan.Win32.Copak.gen
BitDefenderGen:Variant.Lazy.328293
AvastWin32:Evo-gen [Trj]
TACHYONTrojan/W32.Selfmod
SophosTroj/Agent-BFEY
F-SecureHeuristic.HEUR/AGEN.1369103
DrWebTrojan.Siggen27.5791
Trapminemalicious.moderate.ml.score
EmsisoftGen:Variant.Lazy.328293 (B)
IkarusTrojan-Downloader.Win32.FakeAlert
VaristW32/Trojan.MJSE-7842
AviraHEUR/AGEN.1369103
Antiy-AVLTrojan/Win32.Kryptik.gify
Kingsoftmalware.kb.a.946
MicrosoftTrojan:Win32/Cerber.MPI!MTB
XcitiumTrojWare.Win32.Kryptik.TLS@812zm8
ArcabitTrojan.Lazy.D50265
ZoneAlarmVHO:Trojan.Win32.Copak.gen
GDataWin32.Trojan.PSE.1B28NHU
GoogleDetected
AhnLab-V3Packed/Win.FJB.R621039
Acronissuspicious
BitDefenderThetaGen:NN.ZexaF.36802.r9Z@aS75Qdi
ALYacGen:Variant.Lazy.328293
MAXmalware (ai score=80)
VBA32Trojan.Copak
Cylanceunsafe
PandaTrj/Genetic.gen
RisingTrojan.Kryptik!1.BF57 (CLASSIC)
YandexTrojan.Kryptik_AGen!qJadBmaqIy4
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Kryptik.GIFQ!tr
DeepInstinctMALICIOUS
CrowdStrikewin/malicious_confidence_100% (W)

How to remove Lazy.328293?

Lazy.328293 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment