Malware

Lazy.81379 (file analysis)

Malware Removal

The Lazy.81379 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Lazy.81379 virus can do?

  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid
  • Anomalous binary characteristics

How to determine Lazy.81379?


File Info:

name: EBB8894F459A107FA645.mlw
path: /opt/CAPEv2/storage/binaries/01bb6f138bc3f06c8264533eb2c3737b42c5c8d62afa2332fb44b1600f264f65
crc32: BD52B34B
md5: ebb8894f459a107fa6452ea57ea3faa6
sha1: 18efbe5332830880aa1354e0d2a98c4588eb6fa0
sha256: 01bb6f138bc3f06c8264533eb2c3737b42c5c8d62afa2332fb44b1600f264f65
sha512: e64d8df466b7c1dec595f6b182e8f32c3264a585ab79e2cfbe61978258f151692718ecf35afaf0c559951be13b331105f72a828895adc515f52b79701c03da28
ssdeep: 768:XMS+Cph2aUriLtuRZFwdpyTmNSHSBLVogO6QlRSO/WDGZKga:XMjC2r0ARZF6NFVogjQlRv/L8
type: PE32+ executable (console) x86-64, for MS Windows
tlsh: T17E133B0677E85631CAFFAF34B8F041340670FA566D32E75E5D84C08A0D62B8189B677B
sha3_384: 6a4b62b62e55b6a961a69589473898e693cde73a4d7aa0913e456c1f1f567a007fd78bde66b21444f9be6376cdcce2a1
ep_bytes: 4883ec28488d0d150a0000e8e0030000
timestamp: 1970-01-01 00:00:00

Version Info:

0: [No Data]

Lazy.81379 also known as:

LionicTrojan.Win32.Lazy.4!c
MicroWorld-eScanGen:Variant.Lazy.81379
FireEyeGen:Variant.Lazy.81379
ALYacGen:Variant.Lazy.81379
CylanceUnsafe
TrendMicro-HouseCallTROJ_GEN.R03BH09L921
Paloaltogeneric.ml
BitDefenderGen:Variant.Lazy.81379
AvastWin64:Malware-gen
Ad-AwareGen:Variant.Lazy.81379
EmsisoftGen:Variant.Lazy.81379 (B)
McAfee-GW-EditionArtemis
JiangminWorm.AutoRun.awwe
Antiy-AVLTrojan/Generic.ASMalwS.347F43A
GridinsoftRansom.Win64.Wacatac.sa
GDataGen:Variant.Lazy.81379
McAfeeArtemis!EBB8894F459A
MAXmalware (ai score=80)
FortinetW64/Blackie.AQ!tr
AVGWin64:Malware-gen

How to remove Lazy.81379?

Lazy.81379 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment