Categories: Malware

Razy.674154 (file analysis)

The Razy.674154 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Razy.674154 virus can do?

Presents an Authenticode digital signature
Repeatedly searches for a not-found process, may want to run with startbrowser=1 option
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
The binary likely contains encrypted or compressed data.
The executable is compressed using UPX

How to determine Razy.674154?


File Info:
crc32: CC1A5CFBmd5: bb91272a7606c288eb024c67d4fef2d3name: BB91272A7606C288EB024C67D4FEF2D3.mlwsha1: 491e195bd47eb1db8f7a4f67cd93a03b61bee005sha256: c746995bb8750ce537bf970d3fee87423aca1101da549d871738183e1c16a3ddsha512: edb257358b98f088b6f6c233c426ea40e577950625e74b19ae0fd4741ed458920ae2c1a547c795aff4f987f5eeec520794cbcfe612cc762be4d41318ec0029acssdeep: 768:Z1f07uX579b/lguOuFoB4pmJz99UzIkVgJIODTbxrOU:Z1c7U57gnu8nJB9UzIkVgPXpOUtype: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed
Version Info:
LegalCopyright: x8f6fx4ef6x4ec5x4f9bx6280x672fx4ea4x6d41xff0cx8bf7x52ffx7528x4e8ex5546x4e1ax53cax975ex6cd5x7528x9014xff0cx5982x4ea7x751fx6cd5x5f8bx7ea0x7eb7x4e0ex672cx4ebax65e0x5173InternalName: xingFileVersion: 4.0.1.2CompanyName: xingLegalTrademarks: xingProductName: xingProductVersion: 4.0.1.2FileDescription: xingOriginalFilename: xingTranslation: 0x0804 0x0000

Razy.674154 also known as:

ALYac	Gen:Variant.Razy.674154
Cylance	Unsafe
CrowdStrike	win/malicious_confidence_60% (W)
BitDefender	Gen:Variant.Razy.674154
Cybereason	malicious.a7606c
ESET-NOD32	a variant of Win32/Packed.BlackMoon.A potentially unwanted
TotalDefense	Win32/Oflwr.A!crypt
ClamAV	Win.Dropper.Tiggre-9845940-0
MicroWorld-eScan	Gen:Variant.Razy.674154
Ad-Aware	Gen:Variant.Razy.674154
Sophos	Generic PUA EJ (PUA)
BitDefenderTheta	Gen:NN.ZexaF.34628.cmMfa4hqXxlb
McAfee-GW-Edition	GenericRXMA-QI!A8DB428218DA
FireEye	Gen:Variant.Razy.674154
Emsisoft	Gen:Variant.Razy.674154 (B)
SentinelOne	Static AI – Malicious PE
Microsoft	Program:Win32/Wacapew.C!ml
Gridinsoft	Trojan.Win32.Packed.dd!n
Arcabit	Trojan.Razy.DA496A
GData	Win32.Trojan.Agent.WP
AhnLab-V3	Malware/Win32.Generic.C4364621
McAfee	Artemis!BB91272A7606
MAX	malware (ai score=86)
VBA32	BScope.Trojan.Wacatac
Malwarebytes	Malware.AI.630807843
Panda	Trj/GdSda.A
TrendMicro-HouseCall	TROJ_GEN.R002H06CL21
Ikarus	AdWare.Win32.BlackMoon
Fortinet	W32/Agent.WP!tr
Qihoo-360	Win32/Trojan.Generic.HgIASRMA