What is “Lazy.64569”?

The Lazy.64569 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Lazy.64569 virus can do?

Dynamic (imported) function loading detected
CAPE extracted potentially suspicious content
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Binary compilation timestomping detected

How to determine Lazy.64569?


File Info:
name: 5481B0FC54D62E7B8455.mlw
path: /opt/CAPEv2/storage/binaries/f3a345e94516a482fe43fedf4fceb2a7021d46fab56cf9b8651e405c79922597
crc32: 23324A5C
md5: 5481b0fc54d62e7b8455f26c65e1a89e
sha1: 7f130f5388b36ee79e553faa71d18becb277f12f
sha256: f3a345e94516a482fe43fedf4fceb2a7021d46fab56cf9b8651e405c79922597
sha512: eadcc93fa171ede4f7e614fd0186523045ce2a64c7aa81222899366f3d5255e30605f9b374dfd24e2d58ba7a2ac20c52de07bcdfdb1fbf6fd659660062ceea67
ssdeep: 3072:suyppRun+PuB86dne7DHrBb1+soDeodzK5J6e:KRunMuiE2DHrv+sid25
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T1D4C3C05623E8E739E81E0BBF503596C0D3F696572642D74C2D8E61EF2D21B960B10BE3
sha3_384: f7aa8f3bbf5611c0c212eead6a68ccd0d4e6a29a273dd2090d93a24a2a91235b4046010ba5a189b909aa54bde607b313
ep_bytes: ff250020400000000000000000000000
timestamp: 2089-10-21 02:02:00

Version Info:
Translation: 0x0000 0x04b0
Comments: 
CompanyName: 
FileDescription: bombcrypt_trainer
FileVersion: 1.0.0.0
InternalName: chrome.exe
LegalCopyright: Copyright ©  2021
LegalTrademarks: 
OriginalFilename: chrome.exe
ProductName: bombcrypt_trainer
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

Lazy.64569 also known as:

MicroWorld-eScan	Gen:Variant.Lazy.64569
FireEye	Gen:Variant.Lazy.64569
McAfee	Artemis!5481B0FC54D6
Cybereason	malicious.c54d62
APEX	Malicious
Paloalto	generic.ml
BitDefender	Gen:Variant.Lazy.64569
Ad-Aware	Gen:Variant.Lazy.64569
McAfee-GW-Edition	BehavesLike.Win32.Generic.cc
Emsisoft	Gen:Variant.Lazy.64569 (B)
SentinelOne	Static AI – Suspicious PE
GData	Gen:Variant.Lazy.64569
MaxSecure	Trojan.Malware.300983.susgen
Gridinsoft	Ransom.Win32.Sabsik.sa
Arcabit	Trojan.Lazy.DFC39
Microsoft	Trojan:Win32/Wacatac.B!ml
BitDefenderTheta	Gen:NN.ZemsilCO.34084.hm0@aafW7Ae
ALYac	Gen:Variant.Lazy.64569
MAX	malware (ai score=88)
Malwarebytes	Trojan.MalPack.MSIL
TrendMicro-HouseCall	TROJ_GEN.R002H09L621

How to remove Lazy.64569?

Lazy.64569 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X