Classification: Malicious
lazagne.exe is a hacktool (Windows 64-bit executable, 5.5 MB). Flagged by 70% of antivirus engines (76 detections). Linked to Lazagne malware.
Detection summary
- 76 antivirus detections (70% detection ratio)
- 0 IDS alerts
- 4 processes observed
- 0 contacted hosts
- 0 DNS requests
Blacklist sightings
| Description |
Source |
First seen |
Last seen |
Labels |
MITRE ATT&CK |
| Generic Malware |
Hybrid-Analysis |
2023-05-23 13:30:05 |
2023-05-23 14:00:10 |
|
|
| Application.Lazagne |
Hybrid-Analysis |
2019-03-26 12:15:25 |
2019-03-26 12:15:25 |
|
S0349 LaZagne
|
Tags
banker
emotet
infostealer
qakbot
Sample information
- Filenames
- lazagne.exe, lazagne.exe.h777XRgNVM777xM
- File type
- PE32+ executable (console) x86-64, for MS Windows
- Size
- 5735701 bytes
- MD5
528b762e232309e2dcad13a5d889a729- SHA-1
66e4c9becbc96c57232d38bfec01fb2b352181b2- SHA-256
5a2e947aace9e081ecd2cfa7bc2e485528238555c7eeb6bcca560576d4750a50- First indexed
- 2019-03-26 12:15:25
- Last updated
- 2026-09-17 05:06:39
Antivirus detections
| Engine | Detection |
|---|
| CAT-QuickHeal | Hacktool.Lazagne |
| McAfee | HTool-Lazagne |
| Cylance | Unsafe |
| Arcabit | Application.Lazagne.H |
| Symantec | Trojan.Gen.MBT |
| TrendMicro-HouseCall | TROJ_GEN.R002C0OBM19 |
| Paloalto | generic.ml |
| ClamAV | Win.Trojan.Lazagne-6779429-0 |
| GData | Application.Lazagne.Q |
| Kaspersky | not-a-virus:PSWTool.Win32.Lazagne.xn |
| BitDefender | Application.Lazagne.H |
| NANO-Antivirus | Riskware.Win64.Pwdump.fneyoo |
| Tencent | Win32.Risk.Riskware.Sunz |
| Emsisoft | Application.Lazagne.H (B) |
| Comodo | Malware@#j1z8pfxteywy |
| DrWeb | Tool.Pwdump.360 |
| TrendMicro | TROJ_GEN.R002C0OBM19 |
| McAfee-GW-Edition | HTool-Lazagne |
| Cyren | W64/Application.BORC-2245 |
| Webroot | W32.Trojan.Lazagne |
| Microsoft | HackTool:Win32/LaZagne |
| ZoneAlarm | not-a-virus:PSWTool.Win32.Lazagne.xn |
| MAX | malware (ai score=99) |
| Panda | Trj/CI.A |
| ESET-NOD32 | Python/Riskware.LaZagne.C |
| Yandex | Riskware.PSWTool! |
| Ikarus | Trojan.Python.Spy |
| Fortinet | Riskware/LaZagne |
| AVG | FileRepMalware |
| Cybereason | malicious.e23230 |
| Avast | FileRepMalware |
| Qihoo-360 | Win32/Virus.PSW.fe3 |
| ALYac | Misc.HackTool.LaZagne |
| AVG | Other:PUP-gen [PUP] |
| AhnLab-V3 | Malware/Win64.RL_Generic.R363367 |
| Alibaba | HackTool:Win32/Almi_LaZagne.b |
| Arcabit | Trojan.Clyp.11 |
| Avast | Other:PUP-gen [PUP] |
| Avira | SPR/LaZagne.A |
| BitDefender | Gen:Heur.Clyp.11 |
| Bkav | W64.AIDetectMalware |
| CAT-QuickHeal | Trojan.Ghanarava.170753843689a729 |
| CTX | exe.hacktool.lazagne |
| CrowdStrike | win/malicious_confidence_100% (W) |
| Cynet | Malicious (score: 99) |
| DeepInstinct | MALICIOUS |
| ESET-NOD32 | multiple detections |
| Elastic | malicious (high confidence) |
| Emsisoft | Gen:Heur.Clyp.11 (B) |
| F-Secure | PrivacyRisk.SPR/LaZagne.A |
| GData | Gen:Heur.Clyp.11 |
| Google | Detected |
| K7AntiVirus | Trojan ( 00564f2d1 ) |
| K7GW | Trojan ( 00564f2d1 ) |
| Kaspersky | HackTool.Win32.Lazagne.ox |
| Kingsoft | Win32.HackTool.Lazagne.ox |
| Lionic | Hacktool.Win32.LaZagne.3!c |
| Malwarebytes | Neshta.Virus.FileInfector.DDS |
| MaxSecure | Trojan.Malware.11658333.susgen |
| McAfeeD | ti!5A2E947AACE9 |
| MicroWorld-eScan | Gen:Heur.Clyp.11 |
| SentinelOne | Static AI - Malicious PE |
| Skyhigh | HTool-Lazagne |
| Sophos | ATK/LaZagne-N |
| Tencent | Win32.Hacktool.Lazagne.Fajl |
| TrellixENS | HTool-Lazagne |
| TrendMicro | HackTool.Win64.Lazagne.ZTHC-A |
| TrendMicro-HouseCall | HackTool.Win64.Lazagne.ZTHC-A |
| VIPRE | Gen:Heur.Clyp.11 |
| Varist | W64/LaZagne.A.gen!Eldorado |
| ViRobot | HackTool.LaZagne.5735701 |
| Webroot | W32.HackTool.Gen |
| Xcitium | Malware@#j1z8pfxteywy |
| ZoneAlarm | ATK/LaZagne-N |
| alibabacloud | Hacktool:Python/laZagne |
| huorong | HackTool/Python.LaZagne.c |
Process list
| Name | Command line |
|---|
| lazagne.exe | |
| lazagne.exe | |
| lazagne.exe.h777XRgNVM777xM.exe | |
| lazagne.exe.h777XRgNVM777xM.exe | |