Categories: Malware

What is “Razy.778024”?

The Razy.778024 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Razy.778024 virus can do?

Yara rule detections observed from a process memory dump/dropped files/CAPE
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
Authenticode signature is invalid

How to determine Razy.778024?


File Info:
name: BD20610BB0DA31227CE1.mlwpath: /opt/CAPEv2/storage/binaries/723acce8b5a4a38c71ef0d28ed6c889257394faa054265144806b1100a8daacacrc32: 343A9ED1md5: bd20610bb0da31227ce1b2af94773a86sha1: fe1a387cc99350ca0ca9f6e098d4850c6c82ecbdsha256: 723acce8b5a4a38c71ef0d28ed6c889257394faa054265144806b1100a8daacasha512: e9e71979bc5304b0bf0fcadf896927e027e5f84dcbac3a5e7baf694fad03305af9c5ed00972f1731c4433562699edd36a3f714696f22e59e3361a644d3c25c4bssdeep: 768:U3g4v/tjxF+OhhQQWS/43pXitliNmK8rmxPME:U3DoK4S8MvKOEtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T15333290BDF5086BFD434253154EB1778AFB2D19655AA0BABB744DAB43D42220AF433CDsha3_384: bcf1d532c1f3f4903992d43a55b550d1f0cc61b88fd84f03f864d8108eb96343bf427a128a019468df1060d2f86b0212ep_bytes: e87b170000e8f616000033c0c3909090timestamp: 2022-08-24 06:32:51
Version Info:
FileVersion: 1.0.0.0FileDescription: 易语言程序ProductName: 易语言程序ProductVersion: 1.0.0.0LegalCopyright: 作者版权所有 请尊重并使用正版Comments: 本程序使用易语言编写(http://www.eyuyan.com)Translation: 0x0804 0x04b0

Razy.778024 also known as:

Bkav	W32.AIDetect.malware2
MicroWorld-eScan	Gen:Variant.Razy.778024
FireEye	Generic.mg.bd20610bb0da3122
ALYac	Gen:Variant.Razy.778024
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.BlackMoon
Alibaba	AdWare:Win32/BlackMoon.7ef5bd64
Cybereason	malicious.bb0da3
BitDefenderTheta	Gen:NN.ZexaF.34646.dq0@aOmS!hnb
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/Packed.BlackMoon.A suspicious
ClamAV	Win.Dropper.Tiggre-9845940-0
BitDefender	Gen:Variant.Razy.778024
Rising	Trojan.Generic@AI.94 (RDML:z1YhiJv9RGUvhZRBmGRilg)
Ad-Aware	Gen:Variant.Razy.778024
Emsisoft	Application.Generic (A)
VIPRE	Gen:Variant.Razy.778024
Trapmine	suspicious.low.ml.score
Sophos	Generic ML PUA (PUA)
Ikarus	AdWare.Win32.BlackMoon
GData	Win32.Trojan-Stealer.BlackMoon.D
Jiangmin	TrojanDownloader.Generic.avzu
Google	Detected
MAX	malware (ai score=89)
Antiy-AVL	Trojan/Generic.ASCommon.218
Kingsoft	Win32.Troj.Generic_a.a.(kcloud)
Cynet	Malicious (score: 100)
VBA32	BScope.Trojan.Wacatac
Malwarebytes	PUP.Optional.ChinAd
APEX	Malicious
SentinelOne	Static AI – Malicious PE
Fortinet	W32/Agent.WP!tr