Categories: Malware

Zusy.304324 (B) (file analysis)

The Zusy.304324 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Zusy.304324 (B) virus can do?

HTTP traffic contains suspicious features which may be indicative of malware related traffic
Performs some HTTP requests
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
Creates a hidden or system file
Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

a.tomx.xyz

r1—sn-4g5ednly.gvt1.com

update.googleapis.com

How to determine Zusy.304324 (B)?


File Info:
crc32: 068E8D96md5: d6eb90c9405f3b2aa7bfe9dc0fe7ff4fname: D6EB90C9405F3B2AA7BFE9DC0FE7FF4F.mlwsha1: 4d9d1eaa12452ada652560bbc25e023129a67cf4sha256: f61bb9b95315e98ef4393c3a8a03a93c2f9e8f4b849805b440cb098356af338dsha512: 2b48687072ea14eef63ca4e653bc2c4f5c05e447d1419c121be467cfd08ff401caaf4d4f15fc63948fffcc3187d17c9037c384cad3a39c32bfc87b4bfe88a576ssdeep: 12288:05dtdurOcGFDQCmjcGcbk/JxambQE38FK5VlcBG5Ga0sCmse3n+KHKAsOc8cBqz:05dtwrkDQrAg/BPIvc1OEyAFVF1xtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
LegalCopyright: x7248x6743x6240x6709 (C) 2020InternalName: 20200823FileVersion: 1, 0, 0, 1CompanyName: LegalTrademarks: ProductName: 20200823 x5e94x7528x7a0bx5e8fProductVersion: 1, 0, 0, 1FileDescription: 20200823 Microsoft x57fax7840x7c7bx5e94x7528x7a0bx5e8fOriginalFilename: 20200823.EXETranslation: 0x0804 0x04b0

Zusy.304324 (B) also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Zusy.304324
FireEye	Generic.mg.d6eb90c9405f3b2a
ALYac	Gen:Variant.Zusy.304324
Cylance	Unsafe
K7AntiVirus	Spyware ( 0055d89a1 )
BitDefender	Gen:Variant.Zusy.304324
K7GW	Spyware ( 0055d89a1 )
Cybereason	malicious.9405f3
Baidu	Win32.Trojan.Farfli.bc
APEX	Malicious
Avast	Win32:Trojan-gen
Kaspersky	HEUR:Trojan-Dropper.Win32.Generic
Rising	Spyware.Socelars!8.EBE4 (TFE:5:q3gJIP9KcON)
Ad-Aware	Gen:Variant.Zusy.304324
Emsisoft	Gen:Variant.Zusy.304324 (B)
F-Secure	Trojan.TR/Spy.Socelars.cxjde
McAfee-GW-Edition	GenericRXLW-DN!D6EB90C9405F
Sophos	ML/PE-A
Jiangmin	TrojanDropper.Generic.dyp
Avira	TR/Spy.Socelars.cxjde
Antiy-AVL	Trojan[Spy]/Win32.Socelars
Microsoft	Trojan:Win32/Wacatac.B!ml
Arcabit	Trojan.Zusy.D4A4C4
ZoneAlarm	HEUR:Trojan-Dropper.Win32.Generic
GData	Gen:Variant.Zusy.304324
Cynet	Malicious (score: 90)
McAfee	GenericRXLW-DN!D6EB90C9405F
MAX	malware (ai score=86)
VBA32	Trojan.Wacatac
Malwarebytes	Spyware.Socelars
Panda	Trj/Agent.AJS
ESET-NOD32	Win32/Spy.Socelars.AD
Tencent	Malware.Win32.Gencirc.11ae4805
Yandex	TrojanSpy.Socelars!/gqnWgsPTAI
Ikarus	Trojan-Spy.Agent
eGambit	Unsafe.AI_Score_100%
Fortinet	W32/Agent.PVDK!tr
AVG	Win32:Trojan-gen