Categories: Malware

Zusy.306711 (file analysis)

The Zusy.306711 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Zusy.306711 virus can do?

Executable code extraction
Injection (inter-process)
Injection (Process Hollowing)
Creates RWX memory
The binary likely contains encrypted or compressed data.
Executed a process and injected code into it, probably while unpacking
Tries to unhook or modify Windows functions monitored by Cuckoo
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Zusy.306711?


File Info:
crc32: E770F9FDmd5: 0709491396762b7eb39ed6c2691967ddname: kenlawfrndx.exesha1: fec4fdbcf43e4779e43d8adbad1c97fb3dbeac7dsha256: 1c4b9a6e6e06ba66af9feefe1b1a585a48d242aef0034d0bcc78b7217e11dc7csha512: 5d95c76f1b977080e28676954ad9f0b39a95616f40f49b36f94773a816b5814370586250e39249ce4805e343ddeafb532308f46a3dfd6b37e83c041f78b66957ssdeep: 24576:rHRSh19IxsqFRG3vtiAA0qyDIRofBkpIwEk:rq19qIHtfBKqktype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
0: [No Data]

Zusy.306711 also known as:

Bkav	W32.AIDetectVM.malwareB
MicroWorld-eScan	Gen:Variant.Zusy.306711
FireEye	Generic.mg.0709491396762b7e
Qihoo-360	HEUR/QVM05.1.F85F.Malware.Gen
McAfee	Fareit-FTB!070949139676
Malwarebytes	Spyware.Agent
AegisLab	Trojan.Win32.Zusy.4!c
K7AntiVirus	Trojan ( 005686cb1 )
BitDefender	Gen:Variant.Zusy.306711
K7GW	Trojan ( 005686cb1 )
CrowdStrike	win/malicious_confidence_100% (W)
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Injector.EMKE
APEX	Malicious
Paloalto	generic.ml
Kaspersky	HEUR:Trojan-PSW.Win32.Chisburg.gen
Alibaba	Trojan:Win32/GenKryptik.84ca1b05
Tencent	Win32.Trojan.Inject.Auto
Ad-Aware	Gen:Variant.Zusy.306711
Emsisoft	Gen:Variant.Zusy.306711 (B)
DrWeb	Trojan.PWS.Stealer.23680
Invincea	heuristic
McAfee-GW-Edition	BehavesLike.Win32.Fareit.dc
Fortinet	W32/Injector.ELZG!tr
Trapmine	malicious.high.ml.score
Ikarus	Win32.Outbreak
Avira	TR/Injector.xxmds
MAX	malware (ai score=80)
Endgame	malicious (high confidence)
Arcabit	Trojan.Zusy.D4AE17
ZoneAlarm	HEUR:Trojan-PSW.Win32.Chisburg.gen
Microsoft	Trojan:Win32/Dynamer!rfn
Cynet	Malicious (score: 100)
AhnLab-V3	Suspicious/Win.Delphiless.X2066
BitDefenderTheta	Gen:NN.ZelphiF.34128.8GW@auM45ioi
ALYac	Gen:Variant.Zusy.306711
Cylance	Unsafe
Rising	Trojan.Injector!1.AFE3 (CLOUD)
SentinelOne	DFI – Suspicious PE
eGambit	Unsafe.AI_Score_99%
GData	Gen:Variant.Zusy.306711
Cybereason	malicious.cf43e4
Panda	Trj/GdSda.A