Categories: Malware

Should I remove “Razy.194027”?

The Razy.194027 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Razy.194027 virus can do?

CAPE extracted potentially suspicious content
Authenticode signature is invalid
Anomalous .NET characteristics
CAPE detected the NjRATGolden malware family

How to determine Razy.194027?


File Info:
name: BB368332C50CA41D84E2.mlwpath: /opt/CAPEv2/storage/binaries/f225ebc6467c205490b93d56854d142b1c482f6293ce1c68fd91c829296ec6c2crc32: ED29745Dmd5: bb368332c50ca41d84e25ecb3f02e636sha1: b9a78f56e879994ed2d63b4f404a2e712a272c93sha256: f225ebc6467c205490b93d56854d142b1c482f6293ce1c68fd91c829296ec6c2sha512: 2021a1aa56153674ed16054e28887bbf2ee3a9b0e515e6ef9804cc80b7dd7f22b40fa1606e128a5ce717e4b084b62ed881be7421d4aeff99efc7d83685b18edassdeep: 384:fX25Ga6wFaspoOrbxRt8yuZb8BbPBe+mzxrLTQb2Ie2leo0L0:vZaBasF9Y5Zb6BJvE0type: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T15EF22B0E7BF50661C9EC2BB95962D22113B0D1039A23E71E0CE858EBBE737C24B15DE5sha3_384: 68595d2608c1eb3279a0ada0432d4d6943b86b9cf48e7a71f5541b51c8ff15215fb26f63268d26bd3ee3cff6774d7216ep_bytes: ff250020400000000000000000000000timestamp: 2022-10-07 13:26:44
Version Info:
Translation: 0x0000 0x04b0FileDescription:  FileVersion: 0.0.0.0InternalName: Server.exeLegalCopyright:  OriginalFilename: Server.exeProductVersion: 0.0.0.0Assembly Version: 0.0.0.0

Razy.194027 also known as:

Bkav	W32.AIDetectMalware.CS
Lionic	Trojan.Win32.Bladabindi.m!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Razy.194027
ClamAV	Win.Trojan.B-468
FireEye	Generic.mg.bb368332c50ca41d
Skyhigh	BehavesLike.Win32.Generic.nt
McAfee	Trojan-FJXA
Cylance	unsafe
Zillya	Trojan.Bladabindi.Win32.155664
Sangfor	Suspicious.Win32.Save.a
K7AntiVirus	Trojan ( 700000121 )
Alibaba	Backdoor:MSIL/Bladabindi.5786616d
K7GW	Trojan ( 700000121 )
Cybereason	malicious.6e8799
BitDefenderTheta	Gen:NN.ZemsilF.36680.cm0@aiNxJ9b
VirIT	Trojan.Win32.MSIL_Heur.A
Symantec	Backdoor.Ratenjay!gen3
ESET-NOD32	a variant of MSIL/Bladabindi.BC
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	HEUR:Backdoor.MSIL.SpyGate.gen
BitDefender	Gen:Variant.Razy.194027
NANO-Antivirus	Trojan.Win32.SpyGate.kfxbih
SUPERAntiSpyware	Backdoor.Bladabindi/Variant
Avast	Win32:BackdoorX-gen [Trj]
Tencent	Msil.Backdoor.Spygate.Kcnw
TACHYON	Backdoor/W32.DN-SpyGate.36864.G
Sophos	Troj/Bbindi-W
Baidu	MSIL.Backdoor.Bladabindi.a
F-Secure	Trojan.TR/Dropper.Gen7
DrWeb	BackDoor.BladabindiNET.27
VIPRE	Gen:Variant.Razy.194027
TrendMicro	BKDR_BLADABI.SMC
Emsisoft	Gen:Variant.Razy.194027 (B)
Ikarus	Trojan.MSIL.Bladabindi
GData	Gen:Variant.Razy.194027
Google	Detected
Avira	TR/Dropper.Gen7
Antiy-AVL	Trojan[Backdoor]/MSIL.Bladabindi.as
Kingsoft	malware.kb.c.1000
Arcabit	Trojan.Razy.D2F5EB
ZoneAlarm	HEUR:Backdoor.MSIL.SpyGate.gen
Microsoft	Backdoor:MSIL/Bladabindi.BI
Varist	W32/MSIL_Troj.FT.gen!Eldorado
AhnLab-V3	Backdoor/Win.SpyGate.R535598
VBA32	Downloader.MSIL.Pabin.Heur
ALYac	Gen:Variant.Razy.194027
MAX	malware (ai score=87)
Malwarebytes	Trojan.Agent
Panda	Trj/GdSda.A
Rising	Backdoor.njRAT!1.9E49 (CLASSIC)
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.10118638.susgen
Fortinet	MSIL/Bladabindi.AS!tr
AVG	Win32:BackdoorX-gen [Trj]
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_100% (W)