Malware

Lazy.436812 malicious file

Malware Removal

The Lazy.436812 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Lazy.436812 virus can do?

  • CAPE extracted potentially suspicious content
  • .NET file is packed/obfuscated with SmartAssembly
  • Authenticode signature is invalid

How to determine Lazy.436812?



File Info:

name: 9122B45A981F31B6260D.mlw
path: /opt/CAPEv2/storage/binaries/776906046dee70e3fbd7ff8ecbc435556cf393869a28c5dc55fda918e2515785
crc32: 6486B4F4
md5: 9122b45a981f31b6260d0e232dc36799
sha1: 313c292a26f73ff1b448ce666659bfe94eb0fcbb
sha256: 776906046dee70e3fbd7ff8ecbc435556cf393869a28c5dc55fda918e2515785
sha512: f37466e3c0c25d056cc6f0584374af7bc36ddd80b4eb5040e1d9b6e90f5a01778d4ada8b88a5dc8d6482093cf0e8b96b8f5a1b291a4a9cdf84a1d539a6290c6f
ssdeep: 3072:pAF6xmnk1/mVK7EpSibsfdEpzyvlaFB0E/0:u6iXqibseyvG
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T155042A49AF5E4A12C18909F6A4E76A01C774DD63978BE70B50C034E89D7F397F882B4E
sha3_384: 5de29a2dfaf5fc44c050a846316e950ebcaa231acdb22824d000c296125d150374966e557f780a7f08efa00c873c51ff
ep_bytes: ff250020400000000000000000000000
timestamp: 2023-11-18 14:15:08


Version Info:

Translation: 0x0000 0x04b0
Comments: SetupTC
CompanyName: Z-H
FileDescription: SetupTC
FileVersion: 3.11.1.0
InternalName: Mcefqnp.exe
LegalCopyright: Copyright © 2009-2016
LegalTrademarks: 
OriginalFilename: Mcefqnp.exe
ProductName: SetupTC
ProductVersion: 3.11.1.0
Assembly Version: 3.11.1.0

Lazy.436812 also known as:

BkavW32.Common.2224B3FD
LionicTrojan.Win32.Mallox.j!c
MicroWorld-eScanGen:Variant.Lazy.436812
ClamAVWin.Packed.Seraph-10016137-0
FireEyeGen:Variant.Lazy.436812
SkyhighArtemis!Trojan
McAfeeArtemis!9122B45A981F
Cylanceunsafe
ZillyaDownloader.Agent.Win32.537175
SangforDownloader.Msil.Mallox.Vt0e
K7AntiVirusTrojan-Downloader ( 005a01891 )
AlibabaRansom:MSIL/Mallox.e91269d9
K7GWTrojan-Downloader ( 005a01891 )
BitDefenderThetaGen:NN.ZemsilF.36680.lm0@aSMg3Yj
VirITTrojan.Win32.MSIL_Heur.A
SymantecML.Attribute.HighConfidence
Elasticmalicious (high confidence)
ESET-NOD32a variant of MSIL/TrojanDownloader.Agent.PCL
APEXMalicious
CynetMalicious (score: 100)
KasperskyHEUR:Trojan-Ransom.MSIL.Mallox.gen
BitDefenderGen:Variant.Lazy.436812
AvastWin32:CrypterX-gen [Trj]
TencentMalware.Win32.Gencirc.10bf5f10
EmsisoftGen:Variant.Lazy.436812 (B)
F-SecureTrojan.TR/Dldr.Agent.nplai
VIPREGen:Variant.Lazy.436812
TrendMicroTROJ_GEN.R049C0XKR23
SophosMal/Generic-S
IkarusTrojan.MSIL.Crypt
GDataGen:Variant.Lazy.436812
GoogleDetected
AviraTR/Dldr.Agent.nplai
Antiy-AVLTrojan/Win32.Wacatac
Kingsoftmalware.kb.c.985
ArcabitTrojan.Lazy.D6AA4C
ZoneAlarmHEUR:Trojan-Ransom.MSIL.Mallox.gen
MicrosoftTrojan:Win32/Wacatac.B!ml
VaristW32/MSIL_Kryptik.KEB.gen!Eldorado
AhnLab-V3Trojan/Win.Mardom.C5546367
ALYacGen:Variant.Lazy.436812
MalwarebytesTrojan.Downloader.MSIL
PandaTrj/Chgt.AD
TrendMicro-HouseCallTROJ_GEN.R049C0XKR23
RisingRansom.Mallox!8.1779D (CLOUD)
SentinelOneStatic AI – Suspicious PE
MaxSecureTrojan.Malware.300983.susgen
FortinetMSIL/Kryptik.AKDT!tr
AVGWin32:CrypterX-gen [Trj]
DeepInstinctMALICIOUS
CrowdStrikewin/malicious_confidence_100% (W)

How to remove Lazy.436812?

Lazy.436812 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment