Categories: Malware

Razy.216362 information

The Razy.216362 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Razy.216362 virus can do?

SetUnhandledExceptionFilter detected (possible anti-debug)
Behavioural detection: Executable code extraction – unpacking
Creates RWX memory
Guard pages use detected – possible anti-debugging.
Dynamic (imported) function loading detected
CAPE extracted potentially suspicious content
.NET file is packed/obfuscated with SmartAssembly
Authenticode signature is invalid
Anomalous .NET characteristics

How to determine Razy.216362?


File Info:
name: 4F5AF0F4DD5A0D99039D.mlwpath: /opt/CAPEv2/storage/binaries/2e18a5afa1f750bf46d7972b4ac112840c458282c73e1952484013a52f2ec209crc32: BACCBCA9md5: 4f5af0f4dd5a0d99039da17d2e078bc7sha1: 60e17104208d0a6e2c60aa75d832161ffade1c24sha256: 2e18a5afa1f750bf46d7972b4ac112840c458282c73e1952484013a52f2ec209sha512: 0df4db7f16310391cda8cca7f15f83eb414884a90c749916e4783005fa74047d3db01989bca1b196e440cd2c022648ac1c0954f2524d1e4cc6e991632f43ccbbssdeep: 768:YlXmaRX+IYW5cxXq3ldCgyNY7MXpwWtixTOTrfH/JEQw9WYsaLQpD4+i5i:aDoIZldCgWY76FtixTOTr/3wEaUpDYtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T139631A5E0E5BDF7BD78C183BC4B319044764E98A0673D32B94C80B99DA047EAA511EEFsha3_384: 8269ede557094d0cb9e379fa92a7b6d6b9ef5e571ebbd514ee8575b2bdf32a81f2b87986cfa5d4174a6a07c01f2e81d9ep_bytes: ff250020400000000000000000000000timestamp: 2022-02-03 08:26:26
Version Info:
0: [No Data]

Razy.216362 also known as:

Lionic	Trojan.Win32.Generic.lVxM
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
FireEye	Generic.mg.4f5af0f4dd5a0d99
ALYac	Gen:Variant.Razy.216362
Cylance	Unsafe
Sangfor	Suspicious.Win32.Save.a
K7AntiVirus	Trojan ( 700000121 )
Alibaba	Trojan:MSIL/Bladabindi.11f22ebc
K7GW	Trojan ( 700000121 )
CrowdStrike	win/malicious_confidence_100% (W)
BitDefenderTheta	Gen:NN.ZemsilF.34182.emW@aaTH1ql
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/Bladabindi.BI
TrendMicro-HouseCall	TROJ_GEN.R002C0RB322
ClamAV	Win.Packed.Zusy-6860470-0
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Gen:Variant.Razy.216362
MicroWorld-eScan	Gen:Variant.Razy.216362
Avast	MSIL:GenMalicious-NX [Trj]
Tencent	Win32.Trojan.Generic.Pfju
Emsisoft	Gen:Variant.Razy.216362 (B)
Baidu	MSIL.Backdoor.Bladabindi.a
TrendMicro	TROJ_GEN.R002C0RB322
McAfee-GW-Edition	BehavesLike.Win32.Backdoor.kh
Sophos	ML/PE-A + Troj/Bbindi-W
Ikarus	Trojan-Dropper.Gen7
eGambit	Unsafe.AI_Score_99%
Avira	TR/Dropper.Gen7
Antiy-AVL	Trojan/Generic.ASMalwS.351F6FD
Gridinsoft	Ransom.Win32.Bladabindi.sa
Microsoft	Backdoor:Win32/Bladabindi!ml
ZoneAlarm	HEUR:Trojan.Win32.Generic
GData	Gen:Variant.Razy.216362
SentinelOne	Static AI – Malicious PE
AhnLab-V3	Trojan/Win32.Barys.C409105
McAfee	Artemis!4F5AF0F4DD5A
VBA32	TScope.Trojan.MSIL
Malwarebytes	Backdoor.Bladabindi
APEX	Malicious
Rising	Backdoor.Njrat!1.9E49 (CLASSIC)
MAX	malware (ai score=85)
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	MSIL/Generic.AP.660D82!tr
AVG	MSIL:GenMalicious-NX [Trj]
Cybereason	malicious.4dd5a0
Panda	Trj/GdSda.A