Razy.133854 (file analysis)

The Razy.133854 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Razy.133854 virus can do?

Sample contains Overlay data
Authenticode signature is invalid

How to determine Razy.133854?


File Info:
name: 915EB7380A39F42532A1.mlw
path: /opt/CAPEv2/storage/binaries/c6ea65c8aa93735a2d45fedfd2125e9edaf13603ccfdc63d442ec805b7230e13
crc32: 409B5879
md5: 915eb7380a39f42532a11fa02241f4a5
sha1: 218993cbaa702c420bd0bd39a97aef0f1aa3bd54
sha256: c6ea65c8aa93735a2d45fedfd2125e9edaf13603ccfdc63d442ec805b7230e13
sha512: 158fb3ec5f7a7caa6bfaf153cb86287c705dd6ea802e4095ccf1fc74738e12686105a947b0b2272e119abfe13cca4c764d2f133dbaee8fd607c67bb07badf883
ssdeep: 1536:pPllYVl1oax6AszZfUTALUjSOmEDkgf243EdIX2cd8Ru5qc:nqR6jtI4d4eW2cRq
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1FAC3CF723AAF188BE0A2A93A1AD5BD13DD2C7D725303DC57E2930B17112A4E1DEF4725
sha3_384: 8e251e6e063c6e83b6b3e5d916383e729a3810d3852022683622851666a4d09a3978722539b0bd9c797363e559ba34f7
ep_bytes: 8d000000000000000000000000000000
timestamp: 2009-06-27 19:43:18

Version Info:
0: [No Data]

Razy.133854 also known as:

Bkav	W32.AIDetectMalware
Lionic	Hacktool.Win32.Katusha.lhTB
tehtris	Generic.Malware
MicroWorld-eScan	Gen:Variant.Razy.133854
FireEye	Generic.mg.915eb7380a39f425
Skyhigh	BehavesLike.Win32.Generic.cm
ALYac	Gen:Variant.Razy.133854
Malwarebytes	Malware.AI.4271813060
VIPRE	Gen:Variant.Razy.133854
Sangfor	Suspicious.Win32.Save.a
K7AntiVirus	Trojan ( 700000061 )
BitDefender	Gen:Variant.Razy.133854
K7GW	Trojan ( 700000061 )
Cybereason	malicious.baa702
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
APEX	Malicious
Rising	Downloader.Renos!8.1D0 (TFE:1:AOU9YsNKRgH)
Emsisoft	Gen:Variant.Razy.133854 (B)
F-Secure	Trojan.TR/Agent.109570
Sophos	Mal/Generic-S
Avira	TR/Agent.109570
MAX	malware (ai score=80)
Antiy-AVL	Trojan/Win32.CodePack
Kingsoft	malware.kb.a.1000
Microsoft	Trojan:Win32/Wacatac.B!ml
Xcitium	TrojWare.Win32.FraudPack.P@2ysxyk
Arcabit	Trojan.Razy.D20ADE
GData	Gen:Variant.Razy.133854
BitDefenderTheta	Gen:NN.ZexaF.36792.hmY@a8WR50j
DeepInstinct	MALICIOUS
Cylance	unsafe
Panda	Trj/Chgt.AD
TrendMicro-HouseCall	TROJ_GEN.R03BH0CK623
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/CodePack.CX!tr
AVG	Win32:Evo-gen [Trj]
Avast	Win32:Evo-gen [Trj]
CrowdStrike	win/malicious_confidence_100% (W)

How to remove Razy.133854?

Razy.133854 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X