Categories: Malware

Lazy.359302 information

The Lazy.359302 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Lazy.359302 virus can do?

The binary contains an unknown PE section name indicative of packing
The binary likely contains encrypted or compressed data.
The executable is compressed using UPX
Authenticode signature is invalid
Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Lazy.359302?


File Info:
name: 222B20BDAB713B529222.mlwpath: /opt/CAPEv2/storage/binaries/e1fc822c6d786f28ffdfe9c3b446caa5dc25caad7bd9069936de92bce9db67fdcrc32: F126D9AFmd5: 222b20bdab713b5292222cfc539d2f43sha1: 81fd67484d4003b74c53ccbb7c8b47c42b1b5766sha256: e1fc822c6d786f28ffdfe9c3b446caa5dc25caad7bd9069936de92bce9db67fdsha512: c1ec7f3f2410823676aacf52e9cc261ea958ef4892ae5ae3fdb481a5e683ebfe5359e3803ec1c2ba409eecde29d831f9c86c7af5d6d8bea42822efd6346eff95ssdeep: 6144:JgP6DKhzXvIT/VbtfdUq56u0nPpeIJGqnQKt3qmAM0ZEnQfYXQ9Iz0adm2O1j4l+:KPgKhz+FXUq5KJpBtyhEoYQ9IzdzesMtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1B184234F02DECD53CABD1E3383F70908E71F1A6CC4CA81161B52F227DE66A6A7567246sha3_384: 4b76bd2e89c241fc0b4967d40b2487d8f8f972abc282895380a78f6792d91613883db873f3d1c282c62e4f4bf77beb4fep_bytes: 60be002048008dbe00f0f7ffc7877490timestamp: 2023-08-09 17:33:55
Version Info:
0: [No Data]

Lazy.359302 also known as:

Bkav	W32.AIDetectMalware
MicroWorld-eScan	Gen:Variant.Lazy.359302
ALYac	Gen:Variant.Lazy.359302
Cylance	unsafe
VIPRE	Gen:Variant.Lazy.359302
Sangfor	Suspicious.Win32.Save.a
CrowdStrike	win/malicious_confidence_70% (D)
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (moderate confidence)
APEX	Malicious
Cynet	Malicious (score: 100)
BitDefender	Gen:Variant.Lazy.359302
Emsisoft	Gen:Variant.Lazy.359302 (B)
TrendMicro	Cryp_Xin2
McAfee-GW-Edition	BehavesLike.Win32.PUPXAX.fc
Trapmine	malicious.moderate.ml.score
FireEye	Generic.mg.222b20bdab713b52
Sophos	Generic ML PUA (PUA)
GData	Gen:Variant.Lazy.359302
Arcabit	Trojan.Lazy.D57B86
Microsoft	Program:Win32/Wacapew.C!ml
AhnLab-V3	Packed/Win.Suspicious.C5450950
Acronis	suspicious
MAX	malware (ai score=84)
VBA32	BScope.TrojanSpy.Keylogger
TrendMicro-HouseCall	Cryp_Xin2
Rising	Trojan.Generic@AI.100 (RDML:6SUBMzf329KJarCVaLG0Kg)
SentinelOne	Static AI – Suspicious PE
MaxSecure	Trojan.Malware.300983.susgen
Cybereason	malicious.84d400
DeepInstinct	MALICIOUS