Categories: Malware

Should I remove “Lazy.61542 (B)”?

The Lazy.61542 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Lazy.61542 (B) virus can do?

Yara rule detections observed from a process memory dump/dropped files/CAPE
Dynamic (imported) function loading detected
CAPE extracted potentially suspicious content
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Binary compilation timestomping detected

How to determine Lazy.61542 (B)?


File Info:
name: ED0BCB465754968CD046.mlwpath: /opt/CAPEv2/storage/binaries/7aee84e31749948bed7e94a09a67277ec239d0e3dc1a396dff21fa67a278b7a3crc32: ECAF8150md5: ed0bcb465754968cd046ff6f02ecb9c7sha1: cae6d8d87c95447989082399b6f947b4d7796074sha256: 7aee84e31749948bed7e94a09a67277ec239d0e3dc1a396dff21fa67a278b7a3sha512: 506bd8e9839339269e027044701fdd2772a90996c22e7ee3b44d04fa4ffee6e5aad5160048269999bbb8c833120497127f6c35c912759e31a80717599bc508d9ssdeep: 6144:kbXtPtd9Ss4hzxA7Qc+WYyRSJnCYhvYOM2cCM9hDZFmMaSo2KHq:GZ4NywRCYhvYb/CGfFpaSo9Ktype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T130849EC215A3EC06EA1E423B4F3A3295CE396AFED121B6D21A112148751B79F5DC2F4Fsha3_384: ebb7cb91f391c951e6de6917c7df1b54cd26ed4131970315c8678713c3d32a87b172374206d0d77cb345aa5541706565ep_bytes: ff250020400000000000000000000000timestamp: 2051-08-17 07:12:20
Version Info:
Translation: 0x0000 0x04b0Comments: CompanyName: 20188-2222FileDescription: AQUA SPOOFERFileVersion: 1.0.0.0InternalName: Spoofer.exeLegalCopyright: Copyright © 20188-2222 2021LegalTrademarks: OriginalFilename: Spoofer.exeProductName: AQUA SPOOFERProductVersion: 1.0.0.0Assembly Version: 1.0.0.0

Lazy.61542 (B) also known as:

Lionic	Trojan.Win32.Lazy.4!c
FireEye	Gen:Variant.Lazy.61542
ALYac	Gen:Variant.Lazy.61542
BitDefender	Gen:Variant.Lazy.61542
CrowdStrike	win/malicious_confidence_60% (W)
Arcabit	Trojan.Lazy.DF066
BitDefenderTheta	Gen:NN.ZemsilF.34062.ym0@aecNdHe
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
MicroWorld-eScan	Gen:Variant.Lazy.61542
Ad-Aware	Gen:Variant.Lazy.61542
McAfee-GW-Edition	Artemis
Emsisoft	Gen:Variant.Lazy.61542 (B)
SentinelOne	Static AI – Malicious PE
MAX	malware (ai score=83)
Gridinsoft	Ransom.Win32.Sabsik.sa
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
GData	Gen:Variant.Lazy.61542
AhnLab-V3	Trojan/Win.Generic.C4814139
McAfee	Artemis!ED0BCB465754
Malwarebytes	Trojan.Crypt.MSIL
TrendMicro-HouseCall	TROJ_GEN.R002H09L521
Fortinet	Malicious_Behavior.SB
AVG	Win32:TrojanX-gen [Trj]
Avast	Win32:TrojanX-gen [Trj]