Categories: Trojan

Should I remove “Trojan:Win32/Zusy.AMMH!MTB”?

The Trojan:Win32/Zusy.AMMH!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan:Win32/Zusy.AMMH!MTB virus can do?

Sample contains Overlay data
Reads data out of its own binary image
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
Touches a file containing cookies, possibly for information gathering

How to determine Trojan:Win32/Zusy.AMMH!MTB?


File Info:
name: 2B65C07D9CB352295F12.mlwpath: /opt/CAPEv2/storage/binaries/e0ff1ab0101d991956d5f61457b00b3b9f247b140266bc97dc4d2f310c6c00c4crc32: E49B1549md5: 2b65c07d9cb352295f12b50014628b3csha1: f47b0c303f2a8cb13d3b48f83ad36bad5ca087c2sha256: e0ff1ab0101d991956d5f61457b00b3b9f247b140266bc97dc4d2f310c6c00c4sha512: 50fdc798f77112dd742c28f0b8a566f8aaf443c6c08cc8c4899b693e36a0ca011be2e0c2336897d3074ce55c2b50d8f34b2372280838bb19292f11b1b5567c4dssdeep: 24576:HNTCQWRV8cGhB7OhasNtcrDEriGWeLxfgKgkjpa1nxnMNT4bF:HJCdwh8osDcMHLx7LenhGutype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1902512127AC18872D2A3293318B597A1593CBC721F364ADB13E03E6EDF706D0AA35757sha3_384: 1d5dbfd8d3402c382587927b9e5f970448df0eba63c1184ff37308f1e9a4b81bbecdaca0385c39ded97c038f5079ba4aep_bytes: e80c050000e978feffffcccccccccccctimestamp: 2024-01-27 14:39:40
Version Info:
0: [No Data]

Trojan:Win32/Zusy.AMMH!MTB also known as:

Bkav	W32.AIDetectMalware
Elastic	malicious (high confidence)
FireEye	Generic.mg.2b65c07d9cb35229
Skyhigh	BehavesLike.Win32.Trojan.fc
McAfee	Artemis!2B65C07D9CB3
VIPRE	Gen:Variant.Jaik.224913
ESET-NOD32	a variant of Win32/Kryptik.HWWV
ClamAV	Win.Packed.Jaik-10020557-0
BitDefender	Gen:Variant.Jaik.224913
NANO-Antivirus	Virus.Win32.Gen.ccmw
MicroWorld-eScan	Gen:Variant.Jaik.224913
Avast	FileRepMalware [Misc]
Emsisoft	Gen:Variant.Jaik.224913 (B)
Zillya	Downloader.Fero.Win32.854
Sophos	Generic ML PUA (PUA)
SentinelOne	Static AI – Suspicious PE
Google	Detected
Microsoft	Trojan:Win32/Zusy.AMMH!MTB
Arcabit	Trojan.Jaik.D36E91
GData	Gen:Variant.Jaik.224913
MAX	malware (ai score=86)
Rising	Trojan.Generic@AI.97 (RDML:fRA5MOEWQc8pWLdCIv4Pyw)
Fortinet	W32/Kryptik.HVWI!tr
AVG	FileRepMalware [Misc]
DeepInstinct	MALICIOUS