Categories: Spy

Spyware.ZeuS.Panda (file analysis)

The Spyware.ZeuS.Panda is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Spyware.ZeuS.Panda virus can do?

Executable code extraction
Presents an Authenticode digital signature
Creates RWX memory
Network activity detected but not expressed in API logs
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Spyware.ZeuS.Panda?


File Info:
crc32: F58A50CAmd5: 929382d455868a6037c3a4ff93e81314name: upload_filesha1: 913fca01c50a2be893f26de347cef21f185de49csha256: 70eae6d411554b0587f9bc3e7e7cc753e81b8086310dc5fa8181c44632fe1adasha512: cffd02e07e36a79c75f86c1bc3eeed352fb6b2fabe399d88dc2d69dfe9cd829e8888752d2b9b32f54b7ebacfc79b04ecee0f292545a47163ae0703038168cdbessdeep: 6144:+LJeRq3s+SoggtUQg2tHlQNCL0TJd5FjZ0nriipVor1aYtE6gR9KTlkyrcijO:4n3s+3tvdtFCCYV7FjqP81aoblk/ijOtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
LegalCopyright: Copyright xa9 2007, 2008, 2009, 2010, 2011, 2012 Jakub WilkFileDescription: PDF to DjVu converterFileVersion: 0.7.14Comments: This package is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; version 2 dated June, 1991.ProductName: pdf2djvu 0.7.14 (DjVuLibre 3.5.25, poppler 0.18.4, GNOME XSLT 1.1.26, GNOME XML 2.7.8)Translation: 0x0409 0x0000

Spyware.ZeuS.Panda also known as:

MicroWorld-eScan	Trojan.GenericKD.34253875
Qihoo-360	Generic/HEUR/QVM07.1.E1BD.Malware.Gen
ALYac	Trojan.Agent.Zenpak
BitDefender	Trojan.GenericKD.34253875
Arcabit	Trojan.Generic.D20AAC33
Invincea	heuristic
Symantec	Ransom.Wannacry
ESET-NOD32	a variant of Win32/Kryptik.HFFW
APEX	Malicious
Paloalto	generic.ml
Kaspersky	Trojan.Win32.Zenpak.apub
Alibaba	Backdoor:Win32/KZip.e4a5c1e3
Ad-Aware	Trojan.GenericKD.34253875
Emsisoft	MalCert.A (A)
F-Secure	Trojan.TR/AD.CobaltStrike.uqvft
DrWeb	Trojan.DownLoad4.13998
TrendMicro	TROJ_FRS.VSNTGT20
FireEye	Generic.mg.929382d455868a60
Sophos	Mal/Generic-S
Ikarus	Malware.Win32.CobaltStrike
Webroot	W32.Zenpak.apub
Avira	TR/AD.CobaltStrike.uqvft
MAX	malware (ai score=99)
Antiy-AVL	GrayWare/Win32.Kryptik.ehls
Endgame	malicious (high confidence)
Microsoft	Trojan:Win32/Ymacco.AA70
ZoneAlarm	Trojan.Win32.Zenpak.apub
Cynet	Malicious (score: 100)
McAfee	Artemis!929382D45586
VBA32	BScope.Trojan.Zenpak
Malwarebytes	Spyware.ZeuS.Panda
TrendMicro-HouseCall	TROJ_FRS.VSNTGT20
Rising	Trojan.Zenpak!8.10372 (CLOUD)
SentinelOne	DFI – Suspicious PE
GData	Win32.Malware.CobaltStrike.VDY4D9
AVG	FileRepMalware
Avast	FileRepMalware