Categories: Malware

What is “Razy.823618”?

The Razy.823618 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Razy.823618 virus can do?

The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
Anomalous binary characteristics

Related domains:

wpad.local-net

How to determine Razy.823618?


File Info:
name: 0A1D66FF3401C84EE018.mlwpath: /opt/CAPEv2/storage/binaries/cf781f98bb5e607222685745218e5d62d88129ad2e5398afb14b4029a7d4a67bcrc32: 87DAFD9Emd5: 0a1d66ff3401c84ee018093f5275e99asha1: ac53d5b399062a269579e9677ec7293022c14d20sha256: cf781f98bb5e607222685745218e5d62d88129ad2e5398afb14b4029a7d4a67bsha512: bebb1aa02a6fb0be162c3b8e5821c23ff1b1a0c9f9c8456bc9347be11ab281ce62f71b1ff923d76566a29e3cda3d78258b7d2af5faab836c6ae5d29d3d4a0699ssdeep: 768:GHhfWinfwUFAvnbCTIUL+naSOu9/EQ5EC7F:0uin5FAvOTIUL+nb/EQ5FFtype: PE32 executable (console) Intel 80386, for MS Windowstlsh: T1BCF27D16BB749202E2C2047016E8F1F3D9F77AB1B25480AFB758171E29B1BDD652632Fsha3_384: e28badd03193b9857fb304448fb5c4a11c7381a36b530116e4bc3c60a01c09d7d68d413bc3aaa57c3131e757b59c96e2ep_bytes: e870080000e9b3fdffff8bff558bec81timestamp: 2017-09-06 02:40:22
Version Info:
Comments: Java Access BridgeCompanyName: Oracle CorporationFileDescription: Java(TM) Platform SE binaryFileVersion: 8.0.1510.12Full Version: 1.8.0_151-b12InternalName: jabswitchLegalCopyright: Copyright © 2017OriginalFilename: jabswitch.exeProductName: Java(TM) Platform SE 8ProductVersion: 8.0.1510.12Translation: 0x0409 0x04b0

Razy.823618 also known as:

Bkav	W32.AIDetect.malware1
Lionic	Trojan.Win32.Diple.4!c
MicroWorld-eScan	Gen:Variant.Razy.823618
FireEye	Gen:Variant.Razy.823618
McAfee	Artemis!0A1D66FF3401
Cylance	Unsafe
Cybereason	malicious.f3401c
Symantec	ML.Attribute.HighConfidence
Avast	FileRepMalware
Kaspersky	HEUR:Trojan.Win32.Diple.gen
BitDefender	Gen:Variant.Razy.823618
Tencent	Win32.Trojan.Diple.Eev
Ad-Aware	Gen:Variant.Razy.823618
Emsisoft	Gen:Variant.Razy.823618 (B)
McAfee-GW-Edition	Artemis
GData	Gen:Variant.Razy.823618
Webroot	W32.Malware.Gen
Gridinsoft	Ransom.Win32.Wacatac.sa
Microsoft	Trojan:Win32/Wacatac.B!ml
ALYac	Gen:Variant.Razy.823618
MAX	malware (ai score=85)
VBA32	Trojan.Diple
TrendMicro-HouseCall	TROJ_GEN.R035H09KL21
Yandex	Trojan.Diple!ca0AgMxoSo8
AVG	FileRepMalware
Panda	Trj/CI.A