Lazy.397537 malicious file

The Lazy.397537 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Lazy.397537 virus can do?

Authenticode signature is invalid

How to determine Lazy.397537?


File Info:
name: 1F9C32B0A0DE1D5421E3.mlw
path: /opt/CAPEv2/storage/binaries/f1b405c6c55c1e03ccdc840f1e44e30ca1b9bbd90439d130f6db8ac30ae2c0af
crc32: 95D3551B
md5: 1f9c32b0a0de1d5421e3cf97e4da12fa
sha1: 8ef17d11bb2111e2da12e338e0bc1c15833755a9
sha256: f1b405c6c55c1e03ccdc840f1e44e30ca1b9bbd90439d130f6db8ac30ae2c0af
sha512: dae83646656c9eb8deb7fc6ad25cd45d443cbd08af0cb120c14522229deb5a51476084d513f59aa251c0f17471cd6ad011e23fd1167278d9b4c9c7eac8e951f8
ssdeep: 6144:KMTeW/s5GqrO5aXnfEGIXWPvZAObyC+s42+RNWtBhv6aoaxpEQVD6JVs0BC+:GmcGqrOk86xR+s42w0B8ST6rs0BC+
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T1CE74AF507CD0C0FFC8B24F3504E493759A6B6924CD41AABBF798CF6E5D70A80925A63B
sha3_384: 574779bb61da23094b77d1a83fb641e4aa121dd518b8b94d1c3eafac53540ae8c9993094b4bf57bc4804cd1167250635
ep_bytes: e8c8070000e974feffff558bec8b4508
timestamp: 2023-09-30 11:23:26

Version Info:
0: [No Data]

Lazy.397537 also known as:

Bkav	W32.AIDetectMalware
MicroWorld-eScan	Gen:Variant.Lazy.397537
ALYac	Gen:Variant.Lazy.397537
Malwarebytes	Trojan.Crypt
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (D)
Cyren	W32/Kryptik.KSI.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/Kryptik.HUQK
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	HEUR:Trojan-PSW.Win32.Stealerc.gen
BitDefender	Gen:Variant.Lazy.397537
Avast	Win32:PWSX-gen [Trj]
Emsisoft	Gen:Variant.Lazy.397537 (B)
DrWeb	Trojan.Inject4.61510
VIPRE	Gen:Variant.Lazy.397537
Trapmine	suspicious.low.ml.score
FireEye	Generic.mg.1f9c32b0a0de1d54
Sophos	Generic ML PUA (PUA)
SentinelOne	Static AI – Suspicious PE
GData	Gen:Variant.Lazy.397537
Webroot
MAX	malware (ai score=82)
Arcabit	Trojan.Lazy.D610E1
ZoneAlarm	HEUR:Trojan-PSW.Win32.Stealerc.gen
Google	Detected
AhnLab-V3	Trojan/Win.Generic.C5302376
Rising	Backdoor.Mokes!8.619 (TFE:5:cp4sb0ybDnO)
Ikarus	Trojan.Win32.Crypt
Fortinet	W32/Kryptik.HUQK!tr
BitDefenderTheta	Gen:NN.ZexaF.36738.wqW@aiJuJfb
AVG	Win32:PWSX-gen [Trj]
DeepInstinct	MALICIOUS

How to remove Lazy.397537?

Lazy.397537 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X