Malware

Should I remove “Lazy.423828”?

Malware Removal

The Lazy.423828 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Lazy.423828 virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Sample contains Overlay data
  • Reads data out of its own binary image
  • CAPE extracted potentially suspicious content
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • CAPE detected the shellcode get eip malware family
  • Attempts to modify proxy settings
  • Creates a copy of itself
  • Deletes executed files from disk
  • Yara detections observed in process dumps, payloads or dropped files

How to determine Lazy.423828?


File Info:

name: 629BB70C8F380C203DD4.mlw
path: /opt/CAPEv2/storage/binaries/b55aaab7cc92f8d329dfe9909022e734bd34169cb6655643b8e3735ea1e7a257
crc32: 73DA044C
md5: 629bb70c8f380c203dd4b08b20b1935b
sha1: c69b9409bfe6b3b936d420070ddeb78d646795b5
sha256: b55aaab7cc92f8d329dfe9909022e734bd34169cb6655643b8e3735ea1e7a257
sha512: 23a03535fcacb54e1404048324a2a38069965a59b40e281e065099f78c6cacd5f0a3cc6596b3ae5378a8cf19baa4628f3d7d8dde03329e90acab0e8f615b4a43
ssdeep: 49152:x2f0YxCKVimYgCHFpbq4TTJbiAgE1+EZJQ6Wgp:8f0GVsHFphT95m6v
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T15AA5E158173F26C3D023873299EFCEB7886159FCE4E3C6B8B0D0756AF6967D05892069
sha3_384: 75d706e7264e0bc95839213923110e29917e96270c66c5afcb461eb5a30fd08d15f530319675764e0fcb4ec25215d6db
ep_bytes: 1b5360d14b3ae4564edbedc7cc91857d
timestamp: 1972-09-27 00:00:00

Version Info:

0: [No Data]

Lazy.423828 also known as:

BkavW32.AIDetectMalware
tehtrisGeneric.Malware
MicroWorld-eScanGen:Variant.Lazy.423828
ClamAVWin.Packed.Razy-9785185-0
FireEyeGeneric.mg.629bb70c8f380c20
SkyhighBehavesLike.Win32.Generic.vc
McAfeeTrojan-FVOQ!629BB70C8F38
MalwarebytesGeneric.Malware.AI.DDS
VIPREGen:Variant.Lazy.423828
SangforTrojan.Win32.Save.a
K7AntiVirusTrojan ( 005a45ef1 )
K7GWTrojan ( 005a45ef1 )
CrowdStrikewin/malicious_confidence_100% (W)
BitDefenderThetaGen:NN.ZexaF.36744.d6Z@aqPQx@k
SymantecML.Attribute.HighConfidence
Elasticmalicious (high confidence)
ESET-NOD32a variant of Win32/Kryptik_AGen.BGV
APEXMalicious
CynetMalicious (score: 100)
KasperskyTrojan.Win32.Copak.btqjv
BitDefenderGen:Variant.Lazy.423828
NANO-AntivirusTrojan.Win32.Selfmod.kcvioa
AvastWin32:RATX-gen [Trj]
TencentTrojan.Win32.Selfmod.ka
EmsisoftGen:Variant.Lazy.423828 (B)
F-SecureHeuristic.HEUR/AGEN.1368582
DrWebTrojan.Siggen12.42976
ZillyaTrojan.KryptikAGen.Win32.11049
TrendMicroTROJ_GEN.R03BC0DBH24
Trapminesuspicious.low.ml.score
SophosTroj/Agent-BFEY
IkarusTrojan.Win32.Glupteba
GDataWin32.Trojan.PSE.11XGYE9
JiangminTrojan.Copak.csjb
GoogleDetected
AviraHEUR/AGEN.1368582
MAXmalware (ai score=87)
Antiy-AVLTrojan/Win32.Kryptik.gify
XcitiumTrojWare.Win32.Kryptik.TLS@812zm8
ArcabitTrojan.Lazy.D67794
ZoneAlarmTrojan.Win32.Copak.btqjv
MicrosoftTrojan:Win32/Glupteba.MT!MTB
VaristW32/Trojan.ULNO-1867
AhnLab-V3Trojan/Win.BG.C5400712
Acronissuspicious
VBA32Trojan.Copak
ALYacGen:Variant.Lazy.423828
TACHYONTrojan/W32.Selfmod
Cylanceunsafe
PandaTrj/Genetic.gen
TrendMicro-HouseCallTROJ_GEN.R03BC0DBH24
RisingTrojan.Kryptik!1.BF57 (CLASSIC)
SentinelOneStatic AI – Malicious PE
FortinetW32/Kryptik.GIFQ!tr
AVGWin32:RATX-gen [Trj]
Cybereasonmalicious.9bfe6b
DeepInstinctMALICIOUS

How to remove Lazy.423828?

Lazy.423828 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment