Categories: Malware

Razy.749524 malicious file

The Razy.749524 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Razy.749524 virus can do?

Executable code extraction
Attempts to connect to a dead IP:Port (1 unique times)
Creates RWX memory
Reads data out of its own binary image
Attempts to remove evidence of file being downloaded from the Internet

Related domains:

esureforme100.myddns.rocks

How to determine Razy.749524?


File Info:
crc32: 82827D24md5: ec4fb9bcd4d0f04bf52462fc9251fab1name: EC4FB9BCD4D0F04BF52462FC9251FAB1.mlwsha1: d7fb12bd1f18910586fbdf63b7520474044c06c2sha256: 5b109baf5c27b68041f902d867bdde2a260cddbea90ecccb09037751ab2bd032sha512: c3e8f9a92e7331d38f52b28600ddfa98c6da595bd694bb94f00cc98e9d6b9e744db15eae46a4b77a7212767d1574ede0396203c53faa01e4bc016c1269c81369ssdeep: 12288:7qh52lqanWk9/6pRUbeV1QpqJaY2483C:7SAnWkAMqHJUv3type: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
0: [No Data]

Razy.749524 also known as:

K7AntiVirus	Trojan ( 0056ef3d1 )
Elastic	malicious (high confidence)
DrWeb	Trojan.Packed2.43049
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Razy.749524
Cylance	Unsafe
CrowdStrike	win/malicious_confidence_70% (W)
Alibaba	Trojan:Win32/Injuke.13a9edab
K7GW	Trojan ( 0056ef3d1 )
Cybereason	malicious.cd4d0f
Cyren	W32/Kryptik.BKJ.gen!Eldorado
ESET-NOD32	Win32/Agent.TJS
APEX	Malicious
Avast	Win32:Malware-gen
Kaspersky	Trojan.Win32.Injuke.eodj
BitDefender	Gen:Variant.Razy.749524
NANO-Antivirus	Trojan.Win32.Injuke.iulzdu
MicroWorld-eScan	Gen:Variant.Razy.749524
Ad-Aware	Gen:Variant.Razy.749524
Sophos	Mal/Generic-S
BitDefenderTheta	Gen:NN.ZexaF.34688.5uW@aygWuIhi
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	BehavesLike.Win32.Dropper.dm
FireEye	Generic.mg.ec4fb9bcd4d0f04b
Emsisoft	Gen:Variant.Razy.749524 (B)
Avira	TR/Crypt.Agent.ymlqo
Microsoft	Trojan:Win32/Glupteba.VAM!MTB
Gridinsoft	Trojan.Win32.Agent.oa!s1
GData	Gen:Variant.Razy.749524
AhnLab-V3	Trojan/Win.Generic.C4439462
McAfee	GenericRXAA-AA!EC4FB9BCD4D0
MAX	malware (ai score=82)
VBA32	Trojan.Injuke
Malwarebytes	Backdoor.AveMaria
Panda	Trj/GdSda.A
Rising	Backdoor.Agent!8.C5D (C64:YzY0OlGbNMTQ/PuL)
Yandex	Trojan.Kryptik!FjlKBsu5D4I
MaxSecure	Trojan.Malware.117344179.susgen
Fortinet	W32/Kryptik.GXKQ!tr
AVG	Win32:Malware-gen