Categories: Malware

Razy.780176 information

The Razy.780176 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Razy.780176 virus can do?

Dynamic (imported) function loading detected
CAPE extracted potentially suspicious content
Authenticode signature is invalid
Network activity detected but not expressed in API logs

Related domains:

wpad.local-net

How to determine Razy.780176?


File Info:
name: 94C6A1634A73FBA4BB7D.mlwpath: /opt/CAPEv2/storage/binaries/72768a6b50f1c44aad6f99d80dd1dc662a0c2decae7d5004cb0d3d2c54d69f14crc32: 7F68332Emd5: 94c6a1634a73fba4bb7dbef9c3160e84sha1: 9bc78338ad113cc86f3c3e11230bba480f011f3esha256: 72768a6b50f1c44aad6f99d80dd1dc662a0c2decae7d5004cb0d3d2c54d69f14sha512: 2e47d46b262cca19b8d264fb2bcf8ef096b5d30ff88d856d5caab126ba7f2b2af5ada7ade55bf23aa8aeb9473462c2b015ace31db34d2eb1b1e36382de9a3051ssdeep: 768:jEi3OyETAn7py4NpMCSzgjb7RlPEe9kn54bfyEbmg0Dg5mmte1KHyEnqU4cSMm:9fn7o4NuIEqkn54eEbmgL4SyFiBmtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1CEE3762E360975FBD0F4867C811E7B1AF064AA53B4635C1D7182CA19CAA45F73B8732Esha3_384: 5c522cbc9cb5b18012f031fac587a25270f8da5a4bc1f3be84da072e30e4f0c5f8b77919a9addb1338c994f8fe74b0eaep_bytes: ff250020400000000000000000000000timestamp: 2020-10-25 01:31:16
Version Info:
Translation: 0x0000 0x04b0FileDescription:  FileVersion: 2.0.0.0InternalName: 词个不非答天表动年年仰不不字非方英是方动信信想式感乓年个年想.exeLegalCopyright:  OriginalFilename: 词个不非答天表动年年仰不不字非方英是方动信信想式感乓年个年想.exeProductVersion: 2.0.0.0Assembly Version: 2.0.0.0

Razy.780176 also known as:

Lionic	Trojan.Win32.Generic.4!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Razy.780176
FireEye	Generic.mg.94c6a1634a73fba4
ALYac	Gen:Variant.Razy.780176
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
Sangfor	Backdoor.MSIL.Bladabindi.gen
K7AntiVirus	Trojan ( 0056befe1 )
Alibaba	Backdoor:MSIL/Bladabindi.66b82bae
K7GW	Trojan ( 0056befe1 )
Cybereason	malicious.34a73f
Cyren	W32/Trojan.HTZY-0193
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/Kryptik.XFA
APEX	Malicious
Paloalto	generic.ml
ClamAV	Win.Trojan.Ursu-7595005-0
Kaspersky	HEUR:Backdoor.MSIL.Bladabindi.gen
BitDefender	Gen:Variant.Razy.780176
NANO-Antivirus	Trojan.Win32.Bladabindi.jbssab
Avast	Win32:TrojanX-gen [Trj]
Ad-Aware	Gen:Variant.Razy.780176
Sophos	Mal/Generic-S
Comodo	Malware@#2unhn7j0haod3
DrWeb	Trojan.DownLoader35.24518
Zillya	Backdoor.Bladabindi.Win32.21730
TrendMicro	TROJ_GEN.R002C0GIG21
McAfee-GW-Edition	RDN/Generic BackDoor
Emsisoft	Gen:Variant.Razy.780176 (B)
SentinelOne	Static AI – Malicious PE
GData	Gen:Variant.Razy.780176
Avira	TR/Kryptik.qouwp
Antiy-AVL	Trojan/Generic.ASMalwS.30F9C39
Arcabit	Trojan.Razy.DBE790
Microsoft	Trojan:Win32/Ymacco.AA72
Cynet	Malicious (score: 100)
AhnLab-V3	Win-Trojan/MSILKrypt14.Exp
McAfee	RDN/Generic BackDoor
MAX	malware (ai score=84)
VBA32	TScope.Trojan.MSIL
Malwarebytes	Trojan.Downloader
TrendMicro-HouseCall	TROJ_GEN.R002C0GIG21
Tencent	Msil.Backdoor.Bladabindi.Hupi
Yandex	Trojan.Kryptik!dfE13/sNuLI
Ikarus	Trojan.MSIL.Crypt
Fortinet	MSIL/Kryptik.NEH!tr
BitDefenderTheta	Gen:NN.ZemsilF.34294.im0@aKPMjDl
AVG	Win32:TrojanX-gen [Trj]
Panda	Trj/GdSda.A
CrowdStrike	win/malicious_confidence_100% (W)
MaxSecure	Win.MxResIcn.Heur.Gen