Categories: Malware

Razy.479098 (B) (file analysis)

The Razy.479098 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Razy.479098 (B) virus can do?

Injection (inter-process)
Injection (Process Hollowing)
Creates RWX memory
The binary likely contains encrypted or compressed data.
The executable is compressed using UPX
Executed a process and injected code into it, probably while unpacking

How to determine Razy.479098 (B)?


File Info:
crc32: A57F87AFmd5: 2089f5f2423a6e00dfe6cf9493bdd0f8name: 2089F5F2423A6E00DFE6CF9493BDD0F8.mlwsha1: a98a72ceb55727c2814c1df7e886174016d1214dsha256: 0db33d053b080713229b75a85226806ca9cca10c204507adbdf1471dd97cc0b7sha512: 5445b08254899dfd1edd77d5e0f062e8839d1fa4096de00036d7a288cd45246e4798a0008ae8a5b9215219418af204e2f6f57e81c0aaba49893cbc94eac3c122ssdeep: 384:/uV6/I1rOxSPBiBOtVNthqaBkKD17aHKDwj4sJ8gnxAI6v:WV1EPBCNrqaBhuMsyrtype: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed
Version Info:
LegalCopyright: Copyright @2021 5DD7InternalName: LoaderFileVersion: 1, 0, 0, 0CompanyName: 5DD7Comments: PSCAD Super UserProductName: PSCAD 5.00 LoaderProductVersion: 1.0FileDescription: PSCAD 5.00 LoaderOriginalFilename: LoaderTranslation: 0x0409 0x04b0

Razy.479098 (B) also known as:

Bkav	W32.AIDetect.malware1
Elastic	malicious (high confidence)
McAfee	GenericRXNP-CN!6F3E25043CFE
Cylance	Unsafe
Cybereason	malicious.2423a6
APEX	Malicious
Avast	Win32:Evo-gen [Susp]
BitDefender	Gen:Variant.Razy.479098
MicroWorld-eScan	Gen:Variant.Razy.479098
Ad-Aware	Gen:Variant.Razy.479098
McAfee-GW-Edition	GenericRXNP-CN!6F3E25043CFE
FireEye	Gen:Variant.Razy.479098
Emsisoft	Gen:Variant.Razy.479098 (B)
Microsoft	Program:Win32/Wacapew.C!ml
Arcabit	Trojan.Razy.D74F7A
GData	Gen:Variant.Razy.479098
MAX	malware (ai score=81)
Malwarebytes	Malware.Heuristic.1003
Rising	Malware.Heuristic!ET#92% (RDMK:cmRtazq+Pco6RxWHP0IJhfyFQk2H)
SentinelOne	Static AI – Suspicious PE
AVG	Win32:Evo-gen [Susp]