Trojan

About “Trojan:Win32/Lazy.EB!MTB” infection

Malware Removal

The Trojan:Win32/Lazy.EB!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan:Win32/Lazy.EB!MTB virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • CAPE extracted potentially suspicious content
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Anomalous binary characteristics

How to determine Trojan:Win32/Lazy.EB!MTB?


File Info:

name: D6A4AAA01F18C7A8165B.mlw
path: /opt/CAPEv2/storage/binaries/09049a03209dc8ddb653b93171a85458cf7860966b954fe95fc0f522383be638
crc32: 17D7B416
md5: d6a4aaa01f18c7a8165bdabc585ca324
sha1: 1958e14917a3aeb8c3a4b2af16fe808fcacd4a26
sha256: 09049a03209dc8ddb653b93171a85458cf7860966b954fe95fc0f522383be638
sha512: 8be624feb3c8ef753cbbdb8b1b15bb4a148b6f9d9f6f2bf4f5a7bd973e1f8719e97488e1a2baf9b16e127bfaadfa9abba5d7566af8cf8196bf14f03f6368bd5f
ssdeep: 24576:maVBPCEjoQ9EcDUooT4lgElvYlO4MB2TLPbN3kPOOmcR:m41ZDUuKEBQpMBsLPR3yXmc
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
tlsh: T1415523F8FF4C25BFE5A9CAB6E6A1D572F03F000169A9A04A4DC7421150A57B6FBA0533
sha3_384: 92bd4cf4304019641a42bb2b59de8363f1ca993b05044dd4c588bbf009d067b9329ad11bfd911f9c4b6ee885e8ea4463
ep_bytes: 558bec837d0c0175195083c404e80200
timestamp: 2022-03-20 19:30:36

Version Info:

0: [No Data]

Trojan:Win32/Lazy.EB!MTB also known as:

BkavW32.AIDetectMalware
LionicTrojan.Win32.Kryptik.4!c
MicroWorld-eScanGen:Variant.Lazy.376462
FireEyeGeneric.mg.d6a4aaa01f18c7a8
SkyhighBehavesLike.Win32.Generic.tc
McAfeeGenericRXAA-AA!D6A4AAA01F18
Cylanceunsafe
ZillyaTrojan.Kryptik.Win32.4333199
SangforSuspicious.Win32.Save.a
AlibabaTrojan:Win32/Kryptik.c9b5d41c
K7GWTrojan ( 005690671 )
K7AntiVirusTrojan ( 005690671 )
BitDefenderThetaGen:NN.ZedlaF.36804.ov4@aCUonuii
SymantecML.Attribute.HighConfidence
Elasticmalicious (high confidence)
ESET-NOD32a variant of Win32/Kryptik.HUJO
APEXMalicious
KasperskyUDS:Trojan.Win32.Kryptik.gen
BitDefenderGen:Variant.Lazy.376462
NANO-AntivirusVirus.Win32.Gen.ccmw
AvastWin32:Evo-gen [Trj]
TencentMalware.Win32.Gencirc.10bf2b03
EmsisoftGen:Variant.Lazy.376462 (B)
F-SecureTrojan.TR/Crypt.Agent.xxvox
VIPREGen:Variant.Lazy.376462
SophosMal/Generic-S
IkarusTrojan.Win32.Krypt
GoogleDetected
AviraTR/Crypt.Agent.xxvox
VaristW32/Kryptik.KLG.gen!Eldorado
Antiy-AVLTrojan/Win32.GenKryptik
Kingsoftmalware.kb.a.997
MicrosoftTrojan:Win32/Lazy.EB!MTB
ArcabitTrojan.Lazy.D5BE8E
ZoneAlarmUDS:Trojan.Win32.Kryptik.gen
GDataGen:Variant.Lazy.376462
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win.Generic.R598662
ALYacGen:Variant.Lazy.376462
MAXmalware (ai score=88)
MalwarebytesMalware.AI.3655740656
PandaTrj/GdSda.A
RisingTrojan.Lazy!8.8EC3 (TFE:1:0KSkQ5yy4vD)
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.121218.susgen
FortinetW32/Kryptik.HUJO!tr
AVGWin32:Evo-gen [Trj]
DeepInstinctMALICIOUS
alibabacloudTrojan:Win/Lazy.EK8PHU

How to remove Trojan:Win32/Lazy.EB!MTB?

Trojan:Win32/Lazy.EB!MTB removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment