What is “Lazy.507273”?

The Lazy.507273 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Lazy.507273 virus can do?

• Behavioural detection: Executable code extraction – unpacking
• Sample contains Overlay data
• Performs HTTP requests potentially not found in PCAP.
• Reads data out of its own binary image
• CAPE extracted potentially suspicious content
• Drops a binary and executes it
• The binary contains an unknown PE section name indicative of packing
• The binary likely contains encrypted or compressed data.
• The executable is compressed using UPX
• Authenticode signature is invalid
• Attempts to repeatedly call a single API many times in order to delay analysis time
• CAPE detected the embedded win api malware family
• Attempts to modify proxy settings
• Yara detections observed in process dumps, payloads or dropped files

How to determine Lazy.507273?

File Info:
name: E666743A8C373B72FC79.mlw
path: /opt/CAPEv2/storage/binaries/70113c877754d7b362bc2932c2280dbea62e0ad44afbe5e97a1638b98b50cc5e
crc32: C8D4D780
md5: e666743a8c373b72fc79739c9b31e576
sha1: bb3279f96c40ee1c64e7518f9d097a8a433bfab0
sha256: 70113c877754d7b362bc2932c2280dbea62e0ad44afbe5e97a1638b98b50cc5e
sha512: 193a7d0d3276d977c4242fe6d94cce75493270d0cc2e3e53374cf65e5e89d8c3a3de40a50ab8cec6f4a0893bb5fa0f80a56caf836b30d0d87a010bbf1a6626c8
ssdeep: 384:bVCPwFRuFn65arz1ZhdaXFXSCVQTLfjDp6HnSq:bVCPwFRo6CpwXFXSqQXfjAHX
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T10AB26C3076D96851E3B7877060F7C096617EBCA17E264D0D3C8EB39D4EB3B91994220E
sha3_384: 4b2831a3d2f35b75d4c3aea4fc696146ed0a7f002649bdd79d80fc504a14f5d7372d8b9e0cd66b6a335034cd4d98fa45
ep_bytes: 60be008000088dbe0090ffff5783cdff
timestamp: 2012-02-16 02:43:40

Version Info:
0: [No Data]

Lazy.507273 also known as:

How to remove Lazy.507273?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.