Categories: Malware

Ser.Zusy.4059 malicious file

The Ser.Zusy.4059 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Ser.Zusy.4059 virus can do?

The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
CAPE detected the RedLine malware family
Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Ser.Zusy.4059?


File Info:
name: EA865D6F7376285F6A05.mlwpath: /opt/CAPEv2/storage/binaries/10f6b1d1886bed7a8c3e0fe42fe373edcead75c57a7083ea67b0f508bad33f71crc32: C152D8E5md5: ea865d6f7376285f6a05fb9f8de5a5c0sha1: 8e4945650929e8fdba64fea70e46856a8f9e61f2sha256: 10f6b1d1886bed7a8c3e0fe42fe373edcead75c57a7083ea67b0f508bad33f71sha512: e06b12610ae48bf800a90369e955cf987803b66b209ad753ba80e5befea9a4d61d40b4f52d7bf83265af5c567fe9769da36fd85bd92564705c4e3b2db65cc0c0ssdeep: 6144:ptUO8AaXYkD6GeN8CAOA98LaS2avUIdIW1mhHuxoPHMPgiQ:R8dXgMCzvwk4itype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1FC551931E39D8F32C771DC716AD0B1287367A83886EA05D6164DCB6AFB781B07B209D5sha3_384: fb87e7c3c52cf8c50cacafa7db4f265e65966865a61b69de866e332078fbb53f00946bd9e63af9ef4c85bc453f9fe077ep_bytes: e810040000e974feffff3b0d14a04200timestamp: 2023-03-02 15:35:52
Version Info:
0: [No Data]

Ser.Zusy.4059 also known as:

ALYac	Gen:Variant.Midie.122206
Cylance	unsafe
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_60% (D)
BitDefender	Gen:Variant.Ser.Zusy.4059
Arcabit	Trojan.Ser.Zusy.DFDB
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/Kryptik.HSQQ
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	HEUR:Trojan-Spy.Win32.Stealer.gen
MicroWorld-eScan	Gen:Variant.Ser.Zusy.4059
Rising	Backdoor.Agent!8.C5D (TFE:5:8pcyw8QUpHP)
Sophos	Generic ML PUA (PUA)
DrWeb	Trojan.PWS.Steam.34510
McAfee-GW-Edition	BehavesLike.Win32.Generic.tz
Trapmine	malicious.moderate.ml.score
FireEye	Generic.mg.ea865d6f7376285f
Emsisoft	Gen:Variant.Ser.Zusy.4059 (B)
Ikarus	Trojan.Win32.Crypt
MAX	malware (ai score=80)
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
ZoneAlarm	HEUR:Trojan-Spy.Win32.Stealer.gen
GData	Gen:Variant.Ser.Zusy.4059
Google	Detected
Acronis	suspicious
SentinelOne	Static AI – Suspicious PE
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Kryptik.HSIR!tr
BitDefenderTheta	Gen:NN.ZexaF.36308.ovW@aaQyG5f
AVG	Win32:PWSX-gen [Trj]
Cybereason	malicious.50929e
Avast	Win32:PWSX-gen [Trj]