About “Lazy.75617” infection

The Lazy.75617 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Lazy.75617 virus can do?

Dynamic (imported) function loading detected
CAPE extracted potentially suspicious content
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid

How to determine Lazy.75617?


File Info:
name: 8FE323AB2ABCBFECE31F.mlw
path: /opt/CAPEv2/storage/binaries/7f30516f4d227b38eb33a7b48c1985bdf2818b8e89deb4f97d10b0b620ec6497
crc32: F12B1A5D
md5: 8fe323ab2abcbfece31fb5f2beb195de
sha1: 600f5269725b53a57af6972cc1f4e24831d7b506
sha256: 7f30516f4d227b38eb33a7b48c1985bdf2818b8e89deb4f97d10b0b620ec6497
sha512: b402fa2c3b754dd3ec1fb801adc109b687ab30e9ec04414a65fd8660f5e87cc2562865e31d409fe14e6eeb9f3abc375daf465b9254c4578ca3422c623c099934
ssdeep: 98304:8F01F0UeHgoDEPQCLDfdSruClP9uRZ3gK5vfuo0:EssDCQ8YryRFnFz
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T132F523238586C061F0DE8E38400A77B213A2BEA5FE6594975980BF5EBF7FD4BA150473
sha3_384: 66e6b8e2ff4efb4be587f3034c8f36c072d5cbd1101be8c844ad85050b1099214cd20ef8b7b43af7266b63e3d5810499
ep_bytes: ff250020400000000000000000000000
timestamp: 2021-12-06 16:57:34

Version Info:
Translation: 0x0000 0x04b0
Comments: 
CompanyName: 
FileDescription: Yuru Yuri Interaction
FileVersion: 1.1.0.0
InternalName: Yuru Yuri Interaction.exe
LegalCopyright: Copyright ©  2020
LegalTrademarks: 
OriginalFilename: Yuru Yuri Interaction.exe
ProductName: Yuru Yuri Interaction
ProductVersion: 1.1.0.0
Assembly Version: 1.1.0.0

Lazy.75617 also known as:

Lionic	Trojan.Win32.Lazy.4!c
MicroWorld-eScan	Gen:Variant.Lazy.75617
FireEye	Gen:Variant.Lazy.75617
ALYac	Gen:Variant.Lazy.75617
BitDefenderTheta	Gen:NN.ZemsilF.34084.rp0@aKNTKdn
APEX	Malicious
BitDefender	Gen:Variant.Lazy.75617
Ad-Aware	Gen:Variant.Lazy.75617
Emsisoft	Gen:Variant.Lazy.75617 (B)
McAfee-GW-Edition	Artemis
GData	Gen:Variant.Lazy.75617
MaxSecure	Trojan.Malware.300983.susgen
Gridinsoft	Ransom.Win32.Sabsik.sa
Microsoft	Trojan:Win32/Wacatac.B!ml
McAfee	Artemis!8FE323AB2ABC
MAX	malware (ai score=88)
TrendMicro-HouseCall	TROJ_GEN.R002H09LA21
SentinelOne	Static AI – Suspicious PE

How to remove Lazy.75617?

Lazy.75617 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X