Categories: Malware

What is “Razy.760416”?

The Razy.760416 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Razy.760416 virus can do?

The binary likely contains encrypted or compressed data.
Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Razy.760416?


File Info:
crc32: 00CD1AC2md5: 249db3f2d9c3d304bf16a42425861a83name: 249DB3F2D9C3D304BF16A42425861A83.mlwsha1: 12c28f737f489609c60808e8160aa0d45aca7e59sha256: 47d87759dadcbdfcea9e61f68c848e60b10b5663e5cd4a373e34eb932af42435sha512: 58870420f819230c3e89359a4633687e6355071edc5c11289fea01e4678692b3b177c3ff98c6c3c5f3c04bf028c35a8bdd92b6253e6ae329d76389083d3813bbssdeep: 24576:+VcZROjvGHkFkU04NWdfccZROjvGHkFkU04NWn0D3:+VcZ8j+044NWGcZ8j+044NW0Dtype: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Version Info:
Translation: 0x0000 0x04b0LegalCopyright: Copyright xa9  2020Assembly Version: 1.0.0.0InternalName: Rasomware2.0.exeFileVersion: 1.0.0.0CompanyName: LegalTrademarks: Comments: ProductName: Rasomware2.0ProductVersion: 1.0.0.0FileDescription: Rasomware2.0OriginalFilename: Rasomware2.0.exe

Razy.760416 also known as:

Elastic	malicious (high confidence)
DrWeb	Trojan.EncoderNET.31372
MicroWorld-eScan	Gen:Variant.Razy.760416
FireEye	Gen:Variant.Razy.760416
McAfee	GenericRXMN-BV!249DB3F2D9C3
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (W)
BitDefender	Gen:Variant.Razy.760416
K7GW	Trojan ( 0057146f1 )
K7AntiVirus	Trojan ( 0057146f1 )
BitDefenderTheta	Gen:NN.ZemsilF.34574.Zm0@aqsz2Gi
Cyren	W32/Trojan.LOGG-2311
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Paloalto	generic.ml
Kaspersky	HEUR:Trojan-Ransom.MSIL.Encoder.gen
Alibaba	Ransom:MSIL/FileCryptor.a5000661
NANO-Antivirus	Trojan.Win32.Ransom.illkff
ViRobot	Trojan.Win32.Z.Filecryptor.850432
Ad-Aware	Gen:Variant.Razy.760416
Sophos	Mal/Generic-R + Mal/Cryptear-A
Comodo	TrojWare.Win32.Agent.lobox@0
F-Secure	Heuristic.HEUR/AGEN.1137051
TrendMicro	Ransom_FileCryptor.R002C0DB521
McAfee-GW-Edition	BehavesLike.Win32.Generic.cc
Emsisoft	Trojan.FileCoder (A)
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.300983.susgen
Avira	HEUR/AGEN.1137051
MAX	malware (ai score=85)
Microsoft	Ransom:MSIL/FileCryptor.AG!MTB
Gridinsoft	Ransom.Win32.Filecoder.sd!ni
Arcabit	Trojan.Razy.DB9A60
ZoneAlarm	HEUR:Trojan-Ransom.MSIL.Encoder.gen
GData	Gen:Variant.Razy.760416
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win32.RL_Ransom.C4212291
ALYac	Trojan.Ransom.Filecoder
Malwarebytes	Ransom.FileCryptor
Panda	Trj/GdSda.A
ESET-NOD32	a variant of MSIL/Filecoder.ACE
TrendMicro-HouseCall	Ransom_FileCryptor.R002C0DB521
Tencent	Win32.Trojan.Razy.Hqvt
Yandex	Trojan.Filecoder!bahPiDofQT0
Ikarus	Trojan-Ransom.FileCrypter
Fortinet	MSIL/Filecoder.ACE!tr.ransom
AVG	Win32:TrojanX-gen [Trj]
Avast	Win32:TrojanX-gen [Trj]
Qihoo-360	Win32/Ransom.Encoder.HgIASOcA