Categories: Malware

Should I remove “Razy.872697”?

The Razy.872697 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Razy.872697 virus can do?

Behavioural detection: Executable code extraction – unpacking
Yara rule detections observed from a process memory dump/dropped files/CAPE
Creates RWX memory
Dynamic (imported) function loading detected
CAPE extracted potentially suspicious content
Unconventionial language used in binary resources: Russian
The binary contains an unknown PE section name indicative of packing
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid

How to determine Razy.872697?


File Info:
name: DC17FB7DD4FD5776307D.mlwpath: /opt/CAPEv2/storage/binaries/50b6b436f918931b741e415d5012323afea00804d2644e746f767935b801a3a5crc32: 7C5E2EDFmd5: dc17fb7dd4fd5776307ddd0090ca4ccdsha1: 664e2290b8cab07a8d079f0dfbaba122c5a3405csha256: 50b6b436f918931b741e415d5012323afea00804d2644e746f767935b801a3a5sha512: 52e2c166d8f97aad5d8204d52fab71aa98b9811a56c7eafb8deb95b14611a608bbe9d2d1f29df0807ea08132f9e09f1052fa2fbd14f890fce10bf6968b333263ssdeep: 98304:IKWEGOC30ijgRQorMoxUlkMl84nux3Skv3SkIDb/YLiP9ZT/2qBX1:HWN3zgRQortxUlX84nrfkCbwLiP9ZT24type: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1B746334276E430DAD392CF37B9CAC296E18E39A37375048D5EE03996A3739B9046F354sha3_384: 3b44ac9372818d3182d3668695a9b8baa13971cc40132b6666a882da18cea650e74d9f0fbf3c8c16404b49e4550d62c5ep_bytes: 558bec83c49c68576668006837344500timestamp: 2006-04-27 21:46:40
Version Info:
0: [No Data]

Razy.872697 also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Razy.872697
FireEye	Generic.mg.dc17fb7dd4fd5776
ALYac	Gen:Variant.Razy.872697
Cylance	Unsafe
VIPRE	Packed.Win32.PWSZbot.gen (v)
Sangfor	Hacktool.Win32.ArchSMS.8
K7AntiVirus	Trojan ( 0055dd191 )
Alibaba	Trojan:Win32/ArchSMS.d01f8d97
K7GW	Trojan ( 0055dd191 )
Cybereason	malicious.dd4fd5
VirIT	Trojan.Win32.SMSSend.HHA
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Kryptik.LSQ
APEX	Malicious
Paloalto	generic.ml
Kaspersky	Hoax.Win32.ArchSMS.hhkb
BitDefender	Gen:Variant.Razy.872697
NANO-Antivirus	Riskware.Win32.ArchSMS.fcnhub
Avast	Win32:Trojan-gen
Tencent	Malware.Win32.Gencirc.10bf8df6
Ad-Aware	Gen:Variant.Razy.872697
Sophos	Mal/Generic-S
Comodo	Malware@#2tj34c2jjepp3
DrWeb	Trojan.SMSSend.4914
Zillya	Trojan.ArchSMS.Win32.131
McAfee-GW-Edition	BehavesLike.Win32.Generic.tc
Emsisoft	Gen:Variant.Razy.872697 (B)
Ikarus	Trojan.Win32.Crypt
GData	Gen:Variant.Razy.872697
Jiangmin	Hoax.ArchSMS.myn
Avira	TR/Crypt.XPACK.Gen2
MAX	malware (ai score=100)
Antiy-AVL	HackTool[Hoax]/Win32.ArchSMS
Arcabit	Trojan.Razy.DD50F9
ZoneAlarm	Hoax.Win32.ArchSMS.hhkb
Microsoft	Trojan:Win32/Multsarch.Q
Cynet	Malicious (score: 100)
McAfee	Artemis!DC17FB7DD4FD
VBA32	Trojan.Zeus.EA.0999
Malwarebytes	Malware.Heuristic.1003
Rising	Ransom.LockScreen!8.83D (RDMK:cmRtazpg8w2A1b4mr+dNNyjimbyJ)
Yandex	Riskware.Hoax!DvpPPgeXBvU
SentinelOne	Static AI – Malicious PE
eGambit	Generic.Malware
BitDefenderTheta	Gen:NN.ZexaF.34212.@FZ@aCIFPxcc
AVG	Win32:Trojan-gen
Panda	Trj/CI.A
CrowdStrike	win/malicious_confidence_70% (W)