Lazy.9398 information

The Lazy.9398 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Lazy.9398 virus can do?

Yara rule detections observed from a process memory dump/dropped files/CAPE
Dynamic (imported) function loading detected
CAPE extracted potentially suspicious content
Authenticode signature is invalid

How to determine Lazy.9398?


File Info:
name: 730F4DAA56A0BED584F5.mlw
path: /opt/CAPEv2/storage/binaries/356f48de7726cdea558c0babc30dcf5b7ae4706919e4d27d6f842dc6453fba37
crc32: 428A17A3
md5: 730f4daa56a0bed584f5ec642a0b3df3
sha1: 50ed35d15ad1c2ccd09e29b3306ff73eddd84c49
sha256: 356f48de7726cdea558c0babc30dcf5b7ae4706919e4d27d6f842dc6453fba37
sha512: a26c89d64a3f8781720e33c9eb52546c41cb8d875f70b1c188aeeaa2e39824ff49463d11dd1f08b244d373a91d9728ad805016eec81c23461d2db9a100b35b55
ssdeep: 768:d+wYqoLrExnEfJuJGZIPr6iJVx6/yg1MxQfaMntZeiYGUotYcFwVc6Kf:dK0EfJIGCrDJVx6qg1MziZ1UEwVcl
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T14023F92A33E88923EABD5BF858398604D376B11A1921DBC93ED972CE17D27C04D42F57
sha3_384: ec31bca125c3a96a758d59a864705ad94dd3f864cdbe4724fc2a50c48ca466e2b2442352ecdc59f798bb25ca02b32bc7
ep_bytes: ff25002040000a00000055000000f6ff
timestamp: 2021-11-09 16:40:27

Version Info:
Translation: 0x0000 0x04b0
Comments: 
CompanyName: 
FileDescription: Google Chrome
FileVersion: 1.0.0.0
InternalName: Loader.exe
LegalCopyright: Copyright ©  2020
LegalTrademarks: 
OriginalFilename: Loader.exe
ProductName: Google Chrome
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

Lazy.9398 also known as:

MicroWorld-eScan	Gen:Variant.Lazy.9398
FireEye	Gen:Variant.Lazy.9398
CAT-QuickHeal	Trojan.YakbeexMSIL.ZZ4
McAfee	Artemis!730F4DAA56A0
Cybereason	malicious.a56a0b
Cyren	W32/MSIL_Kryptik.EHH.gen!Eldorado
APEX	Malicious
BitDefender	Gen:Variant.Lazy.9398
Avast	FileRepMetagen [Malware]
Ad-Aware	Gen:Variant.Lazy.9398
McAfee-GW-Edition	Artemis
Emsisoft	Gen:Variant.Lazy.9398 (B)
Ikarus	Trojan-Downloader.MSIL.Discord
GData	Gen:Variant.Lazy.9398
Avira	TR/Redcap.vmupo
MAX	malware (ai score=88)
Arcabit	Trojan.Lazy.D24B6
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Lazy.9398
Malwarebytes	Trojan.PasswordStealer.MSIL
Rising	Trojan.FakeChrome!1.9C7B (CLASSIC)
SentinelOne	Static AI – Suspicious PE
AVG	FileRepMetagen [Malware]

How to remove Lazy.9398?

Lazy.9398 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X