Malware

Lazy.336445 information

Malware Removal

The Lazy.336445 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Lazy.336445 virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Sample contains Overlay data
  • Reads data out of its own binary image
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • CAPE detected the shellcode get eip malware family
  • Attempts to modify proxy settings
  • Creates a copy of itself
  • Deletes executed files from disk
  • Yara detections observed in process dumps, payloads or dropped files

How to determine Lazy.336445?


File Info:

name: A1F6493052318EFF52F4.mlw
path: /opt/CAPEv2/storage/binaries/e8af627fa460f81f7b20b4f296ac2dae6e7b5ce9b3c7f2acaa7023b0ec8b5d03
crc32: 3DABCDE2
md5: a1f6493052318eff52f49fba16f21d85
sha1: f44372859f65d628297d386a781058e958cd98e2
sha256: e8af627fa460f81f7b20b4f296ac2dae6e7b5ce9b3c7f2acaa7023b0ec8b5d03
sha512: 1e93bc94e49edd2dc9d0c89c71009364a8f6a18a192892a908a6bcd3b6535b108e67bd43402d542bdb869b28ff202e7b24395ee55b2c06f3780a276b6be937bc
ssdeep: 49152:jIcByx2QC4l3NRetgsiTbq4TTow+lsgVy1hySd/WF7kzIKAghbq4TTow+lsgEH5:jIcBA0c3POiThTW81hynFoIAhTWUH5
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T15306E05C27561847C8272B3AEC2DC77FA00925FDBA93DBB9308074AFB6627CC9541A74
sha3_384: 007fe66027895de4a4e339ae55991c2e23d99d94f2218eae08ff38efbdb0cd033e62b18a627789b90d828d21e2f5e5c2
ep_bytes: caee91959a8715129f661c831d2c7439
timestamp: 1971-05-16 00:00:00

Version Info:

0: [No Data]

Lazy.336445 also known as:

BkavW32.AIDetectMalware
LionicTrojan.Win32.Copak.4!c
Elasticmalicious (high confidence)
DrWebTrojan.Siggen12.42976
MicroWorld-eScanGen:Variant.Lazy.336445
ClamAVWin.Packed.Razy-9785185-0
FireEyeGeneric.mg.a1f6493052318eff
SkyhighBehavesLike.Win32.Trojan.wc
McAfeeTrojan-FVOQ!A1F649305231
Cylanceunsafe
SangforTrojan.Win32.Save.a
K7AntiVirusTrojan ( 005a45ef1 )
AlibabaMalware:Win32/km_2ea54.None
K7GWTrojan ( 0001b3411 )
Cybereasonmalicious.59f65d
BitDefenderThetaGen:NN.ZexaF.36744.O@Z@aGX3NXn
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Kryptik_AGen.BGV
APEXMalicious
CynetMalicious (score: 100)
KasperskyHEUR:Trojan.Win32.Copak.pef
BitDefenderGen:Variant.Lazy.336445
NANO-AntivirusTrojan.Win32.PackedDownloader.ijxqni
AvastWin32:RATX-gen [Trj]
TencentTrojan.Win32.Selfmod.ka
TACHYONTrojan/W32.Selfmod
EmsisoftGen:Variant.Lazy.336445 (B)
F-SecureTrojan.TR/Crypt.XPACK.Gen2
VIPREGen:Variant.Lazy.336445
Trapminemalicious.high.ml.score
SophosTroj/Agent-BFEY
IkarusTrojan-Downloader.Win32.FakeAlert
GDataWin32.Trojan.PSE.11XGYE9
JiangminTrojan.Selfmod.bafg
GoogleDetected
AviraTR/Crypt.XPACK.Gen2
Antiy-AVLTrojan/Win32.Kryptik.gify
Kingsoftmalware.kb.a.998
XcitiumTrojWare.Win32.Kryptik.TLS@812zm8
ArcabitTrojan.Lazy.D5223D
ZoneAlarmHEUR:Trojan.Win32.Copak.pef
MicrosoftTrojan:Win32/Glupteba.MT!MTB
VaristW32/Trojan.ULNO-1867
AhnLab-V3Packed/Win.FJB.R623046
Acronissuspicious
VBA32Trojan.Copak
ALYacGen:Variant.Lazy.336445
MAXmalware (ai score=82)
MalwarebytesGeneric.Malware.AI.DDS
PandaTrj/Genetic.gen
RisingTrojan.Kryptik!1.BF57 (CLASSIC)
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.121218.susgen
FortinetW32/Kryptik.GIFQ!tr
AVGWin32:RATX-gen [Trj]
DeepInstinctMALICIOUS
CrowdStrikewin/malicious_confidence_100% (D)

How to remove Lazy.336445?

Lazy.336445 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment