Categories: Malware

Zusy.310062 (file analysis)

The Zusy.310062 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Zusy.310062 virus can do?

Executable code extraction
Injection (inter-process)
Injection (Process Hollowing)
Creates RWX memory
Attempts to mimic the file extension of a PDF document by having ‘pdf’ in the file name.
The binary likely contains encrypted or compressed data.
Executed a process and injected code into it, probably while unpacking
Network activity detected but not expressed in API logs
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Zusy.310062?


File Info:
crc32: 91082A50md5: ada5beecde7f9234cfea4e0654758f9ename: PO7883.pdf.exesha1: 6d9679f46a29b18d3caadb9217b0fa1790c42578sha256: 391bd050efa8e5d02a1d1a5bb174374efce434f2457fdb0ca4c26f92341e4fa5sha512: eca76675eb7411c129891ad2dcc87e9b65a67a15fe0d75856737e7bd4d5ebb5b56ffb4836d31764e2663b34e06600a04642c84fec1e6ea2207443d1704eeeee9ssdeep: 24576:VWl1K4mOu9wsqaEpXtmxS04UvcRrhlMJSdby4TtBEX6jCMi:V2y7EpSS04gc5h7b4XyCMitype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
0: [No Data]

Zusy.310062 also known as:

Bkav	W32.AIDetectVM.malware1
FireEye	Generic.mg.ada5beecde7f9234
McAfee	Artemis!ADA5BEECDE7F
Malwarebytes	Spyware.PasswordStealer
Sangfor	Malware
BitDefender	Gen:Variant.Zusy.310062
K7GW	Trojan ( 0056b5001 )
Cybereason	malicious.46a29b
Invincea	heuristic
APEX	Malicious
Paloalto	generic.ml
GData	Gen:Variant.Zusy.310062
Kaspersky	UDS:DangerousObject.Multi.Generic
Alibaba	Trojan:Win32/DelfInject.ali2000015
MicroWorld-eScan	Gen:Variant.Zusy.310062
Ad-Aware	Gen:Variant.Zusy.310062
F-Secure	Trojan.TR/Injector.mextw
Trapmine	malicious.moderate.ml.score
Emsisoft	Gen:Variant.Zusy.310062 (B)
Ikarus	Win32.Outbreak
Avira	TR/Injector.mextw
MAX	malware (ai score=81)
Endgame	malicious (high confidence)
Arcabit	Trojan.Zusy.D4BB2E
ZoneAlarm	UDS:DangerousObject.Multi.Generic
Microsoft	Trojan:Win32/Wacatac.C!ml
Acronis	suspicious
BitDefenderTheta	Gen:NN.ZelphiF.34138.gHW@aCSavsfi
Cylance	Unsafe
ESET-NOD32	a variant of Win32/Injector.EMTN
Rising	Trojan.Injector!1.C97E (CLASSIC)
SentinelOne	DFI – Suspicious PE
eGambit	Unsafe.AI_Score_98%
Fortinet	W32/EMTN!tr
CrowdStrike	win/malicious_confidence_100% (W)
Qihoo-360	HEUR/QVM05.1.DC98.Malware.Gen