lazagne.exe

Classification: Malicious

lazagne.exe is a hacktool (Windows 64-bit executable, 6.3 MB). Flagged by 47% of antivirus engines (74 detections). Linked to Lazagne malware. Seen in EC.

Detection summary

  • 74 antivirus detections (47% detection ratio)
  • 0 IDS alerts
  • 2 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Malware families: LAZAGNE (S0349)

Where it has been seen

Observed by Maltiverse Threat Observatory sensors in EC, across education networks.

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Lazagne Cyber Threat Alliance 2026-10-12 15:47:02 2026-10-12 15:47:02 country_code:ec industry:education-and-nonprofits malicious-activity S0349 LaZagne
Generic.Malware MalwareBazaar Abuse.ch 2024-09-10 21:14:36 2024-09-10 21:14:36 malicious-activity
Application.Lazagne Hybrid-Analysis 2019-11-01 18:45:12 2019-11-01 18:45:12

Sample information

Filenames
file, lazagne.exe
File type
PE32+ executable (console) x86-64, for MS Windows
Size
6635326 bytes
MD5
68d3bf2c363144ec6874ab360fdda00a
SHA-1
fa2f281fd4009100b2293e120997bfd7feb10c16
SHA-256
ed2f501408a7a6e1a854c29c4b0bc5648a6aa8612432df829008931b3e34bf56
First indexed
2019-11-01 18:45:12
Last updated
2024-09-11 04:06:17

Antivirus detections

EngineDetection
DrWebTool.Pwdump.360
FireEyeApplication.Lazagne.H
CAT-QuickHealHacktool.Lazagne
CylanceUnsafe
AlibabaHackTool:Win32/LaZagne.855d1a30
Cybereasonmalicious.c36314
ArcabitApplication.Lazagne.H
SymantecTrojan.Gen.MBT
ESET-NOD32Python/Riskware.LaZagne.C
TrendMicro-HouseCallHackTool.Win64.LAZAGNE.AE
AvastWin64:Trojan-gen
ClamAVWin.Trojan.Lazagne-6779429-0
BitDefenderApplication.Lazagne.H
NANO-AntivirusTrojan.Win64.LaZagne.fzsvkt
Paloaltogeneric.ml
AegisLabHacktool.Win32.LaZagne.3!c
EmsisoftApplication.Lazagne.H (B)
VIPRETrojan.Win32.Generic!BT
TrendMicroHackTool.Win64.LAZAGNE.AE
McAfee-GW-EditionHTool-Lazagne
SophosGeneric PUA PK (PUA)
IkarusTrojan.Python.Spy
WebrootW32.HackTool.Gen
FortinetRiskware/LaZagne
MicrosoftHackTool:Win32/LaZagne
McAfeeHTool-Lazagne
APEXMalicious
MAXmalware (ai score=84)
GDataApplication.Lazagne.H (2x)
AVGWin64:Trojan-gen
PandaTrj/CI.A
CrowdStrikewin/malicious_confidence_100% (W)
Qihoo-360Win32/Trojan.Hacktool.642
ALYacMisc.HackTool.LaZagne
AVGOther:PUP-gen [PUP]
AhnLab-V3HackTool/Win.LaZagne.R297990
AlibabaHacktool:Py/Passwd.200915
Antiy-AVLTrojan[APT]/Python.Volatilecedar
ArcabitTrojan.Application.Riskware.LaZagne.1
AvastOther:PUP-gen [PUP]
AviraTR/Malware
BitDefenderGen:Variant.Application.Riskware.LaZagne.1
CTXexe.hacktool.lazagne
CynetMalicious (score: 99)
DeepInstinctMALICIOUS
ESET-NOD32Python/Riskware.LaZagne.J application
Elasticmalicious (high confidence)
EmsisoftGen:Variant.Application.Riskware.LaZagne.1 (B)
F-SecureTrojan.TR/Malware
GDataGen:Variant.Application.Riskware.LaZagne.1
GoogleDetected
K7AntiVirusRiskware ( 005ce1a61 )
K7GWRiskware ( 005ce1a61 )
KasperskyHackTool.Win32.LaZagne.cw
KingsoftWin32.HackTool.LaZagne.cw
LionicHacktool.Win32.LaZagne.3!c
MaxSecureTrojan.Malware.11658333.susgen
McAfeeDti!ED2F501408A7
MicroWorld-eScanGen:Variant.Application.Riskware.LaZagne.1
RisingStealer.Agent!8.C2 (KTSE)
SangforSuspicious.Win32.Save.a
SentinelOneStatic AI - Malicious PE
SkyhighBehavesLike.Win64.Dropper.vc
SophosATK/LaZagne-N
SymantecHacktool
TencentMalware.Win32.Gencirc.10be818f
TrellixENSHTool-Lazagne
VIPREGen:Variant.Application.Riskware.LaZagne.1
VaristW64/LaZagne.A.gen!Eldorado
VirITHackTool.Win32.Lazagne.CLI
XcitiumMalware@#1y7bgipppfgn5
ZoneAlarmATK/LaZagne-N
alibabacloudHacktool:Python/laZagne
huorongHackTool/Python.LaZagne.c

Process list

NameCommand line
lazagne.exe
lazagne.exe