Categories: Malware

What is “Razy.748390”?

The Razy.748390 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Razy.748390 virus can do?

Sample contains Overlay data
Presents an Authenticode digital signature
CAPE extracted potentially suspicious content
Authenticode signature is invalid
CAPE detected the shellcode patterns malware family
Yara detections observed in process dumps, payloads or dropped files

How to determine Razy.748390?


File Info:
name: 2FCD3FD7C15600D1A81B.mlwpath: /opt/CAPEv2/storage/binaries/d5336aa042895c3989ed7ae3d25c6c2f6eec87eb6d9b8ed8efd13ee977f44f99crc32: 1BEE0212md5: 2fcd3fd7c15600d1a81b4a420490f23esha1: c441cd43879e1a8aeb1c8cca8750704c8aeeaca1sha256: d5336aa042895c3989ed7ae3d25c6c2f6eec87eb6d9b8ed8efd13ee977f44f99sha512: 06c5de06fd7e3eef3acbe26edc94d809cdb6e4a7d5461c86507e1d17a43ae04dc1ad9b528c47247b641356b8a87e5e1c48ee8adf69e45a6a963b0e68afa1429cssdeep: 6144:sTCtTHQpiAAPULzZRiPCwWBFDw3Hie87jl:dtjQrJ5Ri6wEFDw3k7jltype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T18EB43A353AC75C79C9194A7404B4A8C2B339AA857AC5C7BF71CB03089E07A7B6B1359Esha3_384: 716a0020a643bf635c11b7b328068c479ce0f1167871082bd0a7cd410350a8909a26e5adf54f40f43865e66b9511074eep_bytes: ff250020400000000000000000000000timestamp: 2020-09-03 09:27:00
Version Info:
Translation: 0x0000 0x04b0Comments: 같*9갖갌갆~8개2갆,_감0같갮+갑1}객6갡갬:갪CompanyName: 0갞}갭갑_갊7>갟5강갔*갛26강갟(+갉4갗9개갃FileDescription: 개갞^7갗_8갪&3간갍9갋갈FileVersion: 6.9.12.15InternalName: 84.exeLegalCopyright: Copyright © 2003 - 2020OriginalFilename: 84.exeProductName: 개갞^7갗_8갪&3간갍9갋갈ProductVersion: 6.9.12.15Assembly Version: 0.0.0.0

Razy.748390 also known as:

Bkav	W32.AIDetectMalware.CS
Lionic	Trojan.Win32.NanoBot.m!c
Elastic	Windows.Trojan.Nanocore
MicroWorld-eScan	Gen:Variant.Razy.748390
FireEye	Generic.mg.2fcd3fd7c15600d1
Skyhigh	PWS-FCTC!2FCD3FD7C156
ALYac	Gen:Variant.Razy.748390
Cylance	unsafe
Sangfor	Suspicious.Win32.Save.a
K7AntiVirus	Trojan ( 00561fdb1 )
Alibaba	Backdoor:MSIL/NanoBot.c18cfb11
K7GW	Trojan ( 00561fdb1 )
CrowdStrike	win/malicious_confidence_100% (W)
Symantec	Ransom.Wannacry
ESET-NOD32	a variant of MSIL/Injector.VCT
APEX	Malicious
TrendMicro-HouseCall	TROJ_GEN.R002C0PA924
ClamAV	Win.Trojan.NanoCore-9852758-0
Kaspersky	HEUR:Backdoor.MSIL.NanoBot.gen
BitDefender	Gen:Variant.Razy.748390
NANO-Antivirus	Trojan.Win32.NanoBot.hvmtme
Avast	Win32:PWSX-gen [Trj]
Tencent	Win32.Trojan.FalseSign.Vimw
Sophos	Mal/Generic-S
F-Secure	Trojan.TR/AD.Nanocore.BY
VIPRE	Gen:Variant.Razy.748390
TrendMicro	TROJ_GEN.R002C0PA924
Emsisoft	Gen:Variant.Razy.748390 (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	Backdoor.MSIL.dpqh
Google	Detected
Avira	TR/AD.Nanocore.BY
Varist	W32/MSIL_Kryptik.AEJ.gen!Eldorado
Antiy-AVL	Trojan[Backdoor]/MSIL.NanoBot
Microsoft	Trojan:Win32/Wacatac.B!ml
Xcitium	Malware@#aagkb6qo6irb
Arcabit	Trojan.Razy.DB6B66
ZoneAlarm	HEUR:Backdoor.MSIL.NanoBot.gen
GData	Gen:Variant.Razy.748390
AhnLab-V3	Trojan/Win32.Fareit.C4193954
McAfee	PWS-FCTC!2FCD3FD7C156
MAX	malware (ai score=82)
VBA32	TScope.Trojan.MSIL
Malwarebytes	Trojan.Crypt.MSIL.Generic
Panda	Trj/Genetic.gen
Rising	Backdoor.NanoCore!1.C0C6 (CLASSIC)
Yandex	Trojan.Injector!VahQJq3i5P4
Ikarus	Trojan-Spy.LokiBot
MaxSecure	Trojan.Malware.73691366.susgen
Fortinet	MSIL/Injector.VCP!tr
BitDefenderTheta	Gen:NN.ZemsilF.36802.Fm1@aCSEmme
AVG	Win32:PWSX-gen [Trj]
Cybereason	malicious.7c1560
DeepInstinct	MALICIOUS
alibabacloud	VirTool:MSIL/AgentTesla.F