Malware

What is “Lazy.444966”?

Malware Removal

The Lazy.444966 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Lazy.444966 virus can do?

  • Sample contains Overlay data
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid

How to determine Lazy.444966?


File Info:

name: DD7C323FC67CD990957B.mlw
path: /opt/CAPEv2/storage/binaries/0538a900e278ce102aff271f1436502d9b31b36ecb12e11ca94a46a8f6294f02
crc32: 0BDC4A53
md5: dd7c323fc67cd990957b9aa19850bb29
sha1: ee278591d6d35b4d00962fb2486f2dde940f245a
sha256: 0538a900e278ce102aff271f1436502d9b31b36ecb12e11ca94a46a8f6294f02
sha512: 27dea033bfabbd04d8a4a8eb506a7043cf5db8e210c2329c5d51b905e24a50b237dd165d5403aec75d59dcd32d46a6c634b2a4ad3fd5e81aa5915b361a91fa75
ssdeep: 12288:5O0CYAawPJZWMDlclAWdlVe91W1BUAn1Mo75Vbv59gfIJVgQyfu:5JAaWjWMDlclAWdlVe9YymVD59gfIJVj
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T19DE4C0DE32090B71D9E41130A9172DCAD31963D6866F86DAD424F06C1E3E9EED3BE247
sha3_384: 28bcb674b5c614ffc271e687337db9408a5588b3679de8ad9ab40cfef48c6077d4737ccb64aeb705ea9096298014c817
ep_bytes: 7e0477672e6df3e02b8cfa7139ce92cb
timestamp: 1971-05-16 00:00:00

Version Info:

0: [No Data]

Lazy.444966 also known as:

BkavW32.AIDetectMalware
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.Lazy.444966
SkyhighBehavesLike.Win32.Glupteba.jc
ALYacGen:Variant.Lazy.444966
MalwarebytesGeneric.Malware.AI.DDS
SangforSuspicious.Win32.Save.a
K7AntiVirusTrojan ( 005a45ef1 )
K7GWTrojan ( 005a45ef1 )
Cybereasonmalicious.1d6d35
ArcabitTrojan.Lazy.D6CA26
BitDefenderThetaGen:NN.ZexaF.36608.O8Z@a4B08Bk
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Kryptik_AGen.BGU
CynetMalicious (score: 100)
APEXMalicious
ClamAVWin.Packed.Dridex-9775371-1
KasperskyVHO:Trojan.Win32.Copak.gen
BitDefenderGen:Variant.Lazy.444966
NANO-AntivirusTrojan.Win32.PackedENT.ivkfup
AvastWin32:TrojanX-gen [Trj]
EmsisoftGen:Variant.Lazy.444966 (B)
F-SecureTrojan.TR/Crypt.XPACK.Gen
VIPREGen:Variant.Lazy.444966
Trapminemalicious.moderate.ml.score
FireEyeGeneric.mg.dd7c323fc67cd990
SophosTroj/Agent-BFEY
SentinelOneStatic AI – Malicious PE
VaristW32/Trojan.NJGF-3047
AviraTR/Crypt.XPACK.Gen
MAXmalware (ai score=87)
Antiy-AVLTrojan/Win32.Kryptik.girh
Kingsoftmalware.kb.a.1000
XcitiumTrojWare.Win32.Kryptik.TLS@812zm8
MicrosoftTrojan:Win32/Glupteba.MT!MTB
ZoneAlarmVHO:Trojan.Win32.Copak.gen
GDataGen:Variant.Lazy.444966
GoogleDetected
AhnLab-V3Packed/Win.FJB.C5394144
Acronissuspicious
McAfeeTrojan-FVOQ!DD7C323FC67C
TACHYONTrojan/W32.Selfmod
VBA32Trojan.Khalesi
Cylanceunsafe
PandaTrj/Genetic.gen
RisingTrojan.Kryptik!1.BF57 (CLASSIC)
IkarusTrojan-Downloader.Win32.FakeAlert
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Kryptik.GIFQ!tr
AVGWin32:TrojanX-gen [Trj]
DeepInstinctMALICIOUS
CrowdStrikewin/malicious_confidence_100% (D)

How to remove Lazy.444966?

Lazy.444966 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment