Categories: Malware

Zusy.301338 (file analysis)

The Zusy.301338 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Zusy.301338 virus can do?

Reads data out of its own binary image
Unconventionial language used in binary resources: Chinese (Simplified)
Network activity detected but not expressed in API logs
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Zusy.301338?


File Info:
crc32: EECBF539md5: 9de2805abe6db1491420d0ffae5a414ename: 9DE2805ABE6DB1491420D0FFAE5A414E.mlwsha1: 757c1cfeaa40a1b1f725a291baf4354b399d09c4sha256: 26d5a7981ec6403411ebcbb79a20ca94a9679c8249d2a6d93fea489d0b619651sha512: 8e7ef0c1a3df1496e34ab13c31ae1942f71574fc9cb58ee7f96e51cdede2c083a4d32ce2948854b23760656de07d80faf3bc2cf51e28fa2efcd5dcd0f8e4482assdeep: 6144:lsGeOyY/MQxxXQ9uNoDbKtFLSAioyHHe96JnR:iqjNQ9zqzFPxEhRtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
0: [No Data]

Zusy.301338 also known as:

Bkav	W32.AIDetect.malware2
K7AntiVirus	Trojan ( 000021311 )
Lionic	Trojan.Win32.Banbra.lxcq
Elastic	malicious (high confidence)
McAfee	W32/Mytob.h.gen@MM
Cylance	Unsafe
Zillya	Downloader.Peregar.Win32.284
Sangfor	PUP.Win32.Zusy.301338
CrowdStrike	win/malicious_confidence_80% (W)
Alibaba	Trojan:Win32/PowerSpider.e3745d6b
K7GW	Trojan ( 000021311 )
Cybereason	malicious.abe6db
Baidu	Win32.Backdoor.PowerSpider.b
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	Win32/PowerSpider
APEX	Malicious
Avast	FileRepMetagen [Malware]
Cynet	Malicious (score: 100)
Kaspersky	UDS:DangerousObject.Multi.Generic
BitDefender	Gen:Variant.Zusy.301338
NANO-Antivirus	Trojan.Win32.Delf.qzwsj
MicroWorld-eScan	Gen:Variant.Zusy.301338
Tencent	Win32.Trojan.Generic.Hytm
Sophos	Mal/Generic-S
BitDefenderTheta	Gen:NN.ZexaF.34236.re3@aCAY5kkb
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	WORM_MYTOB.TOMS
McAfee-GW-Edition	W32/Mytob.h.gen@MM
FireEye	Generic.mg.9de2805abe6db149
Emsisoft	Gen:Variant.Zusy.301338 (B)
SentinelOne	Static AI – Malicious PE
Avira	TR/PowerSpider.yuejo
eGambit	Unsafe.AI_Score_99%
Microsoft	Trojan:Win32/Occamy.C26
GData	Gen:Variant.Zusy.301338
AhnLab-V3	Worm/Win32.Mytob.R127173
VBA32	Trojan.Skeeyah
MAX	malware (ai score=100)
Panda	Trj/Genetic.gen
TrendMicro-HouseCall	WORM_MYTOB.TOMS
Rising	Trojan.Generic@ML.91 (RDMK:AwPrPGHBp9u9u5zxf+AbrQ)
Yandex	Trojan.GenAsa!3Br2mZWuK9o
Ikarus	Backdoor.Win32.Nuclear.ai
Fortinet	W32/MyTob.NL@mm
AVG	FileRepMetagen [Malware]
Paloalto	generic.ml