Lazy.364789 malicious file

The Lazy.364789 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Lazy.364789 virus can do?

CAPE extracted potentially suspicious content
Authenticode signature is invalid

How to determine Lazy.364789?


File Info:
name: BBE4100025A0763BFB0A.mlw
path: /opt/CAPEv2/storage/binaries/43a698dbc2dd5846f1946006abf9543f04fb7e5e6dd39eef6447c21aefe0d9b6
crc32: 8A5ED7D3
md5: bbe4100025a0763bfb0a179170c8469f
sha1: afdd38f57bede7880404dc2b050d9e2dce576561
sha256: 43a698dbc2dd5846f1946006abf9543f04fb7e5e6dd39eef6447c21aefe0d9b6
sha512: d9e313dccf1bbe80933486143fa03a0c915760178885e937659f9a932e9ec5533395584e62f77995dde8f1c614dc2c1ec13986c772b8fd594a0b372b53d0a9cc
ssdeep: 192:YvNj4PrGiaaaTMSy9eFh+qp3vNLoabUE1faaa35OL5d/gQQB5u:ANEPB9Ch+qBvSY45w5i
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T11AF3A58CBC98840CEEA9EA71191EF573FE297FC9BA4C9B54D1407FD639721600A4D839
sha3_384: 924f48dc2791dd38916312af24ae1fae99bd0c96f076049926937bb5d799cda024a56a8e40c302a5d15eff8533592018
ep_bytes: ff25ec2c40000000000000000000c02c
timestamp: 2023-07-24 22:23:52

Version Info:
Translation: 0x0000 0x04b0
Comments: 
CompanyName: 
FileDescription: 
FileVersion: 1.0.0.0
InternalName: Matcon purchse order #3545676.exe
LegalCopyright: 
LegalTrademarks: 
OriginalFilename: Matcon purchse order #3545676.exe
ProductName: 
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

Lazy.364789 also known as:

Bkav	W32.Common.F8897E9F
Lionic	Trojan.Win32.Seraph.4!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Lazy.364789
FireEye	Generic.mg.bbe4100025a0763b
CAT-QuickHeal	Trojan.IGENERIC
ALYac	Gen:Variant.Lazy.364789
Malwarebytes	Trojan.Downloader
VIPRE	Gen:Variant.Lazy.364789
Sangfor	Suspicious.Win32.Save.a
K7AntiVirus	Trojan-Downloader ( 005a92041 )
Alibaba	TrojanDownloader:MSIL/Seraph.263e51d7
K7GW	Trojan-Downloader ( 005a92041 )
CrowdStrike	win/malicious_confidence_100% (W)
VirIT	Trojan.Win32.MSIL_Heur.A
Cyren	W32/Agent.EIG.gen!Eldorado
Symantec	MSIL.Downloader!gen8
ESET-NOD32	a variant of MSIL/TrojanDownloader.Agent.PLZ
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	HEUR:Trojan-Downloader.MSIL.Seraph.gen
BitDefender	Gen:Variant.Lazy.364789
Avast	Win32:PWSX-gen [Trj]
Tencent	Malware.Win32.Gencirc.13eaf5ba
Emsisoft	Gen:Variant.Lazy.364789 (B)
F-Secure	Trojan.TR/Dldr.Agent.mudez
Zillya	Downloader.Seraph.Win32.3917
TrendMicro	TROJ_FRS.0NA103GP23
McAfee-GW-Edition	Artemis!Trojan
Sophos	Mal/Generic-S
Ikarus	Trojan.MSIL.Inject
GData	Gen:Variant.Lazy.364789
Avira	TR/Dldr.Agent.mudez
Antiy-AVL	Trojan[Downloader]/MSIL.Seraph
Arcabit	Trojan.Lazy.D590F5
ViRobot	Trojan.Win.Z.Seraph.171520
ZoneAlarm	HEUR:Trojan-Downloader.MSIL.Seraph.gen
Microsoft	Trojan:Win32/Leonem
Google	Detected
AhnLab-V3	Trojan/Win.Generic.C5460879
McAfee	Artemis!BBE4100025A0
MAX	malware (ai score=84)
Cylance	unsafe
Panda	Trj/GdSda.A
TrendMicro-HouseCall	TROJ_FRS.0NA103GP23
Rising	Malware.Obfus/MSIL@AI.80 (RDM.MSIL2:tNfD98uijJIAtc4SkCTyNQ)
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.74570710.susgen
Fortinet	MSIL/AgentTesla.D!tr
BitDefenderTheta	Gen:NN.ZemsilF.36348.km0@aCKMwsh
AVG	Win32:PWSX-gen [Trj]
DeepInstinct	MALICIOUS

How to remove Lazy.364789?

Lazy.364789 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X