Zusy.396023 (file analysis)

The Zusy.396023 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Zusy.396023 virus can do?

The binary likely contains encrypted or compressed data.
Uses Windows utilities for basic functionality
Network activity detected but not expressed in API logs

How to determine Zusy.396023?


File Info:
crc32: D2091644
md5: 1667a3c232ab0ce34e8cfd12fb3de177
name: 1667A3C232AB0CE34E8CFD12FB3DE177.mlw
sha1: 557c9b4191bcb1f94758ee345b0e10d8fec351b7
sha256: aebe5404eb80ee4ee29cb045f375d045766b97425d70839721cc2b3cbad46537
sha512: 2eea76394841ff1d53c59ae34bff60c7caab276dd3006baa13a2232334594000e353be47e081c7cde8beccc4d7dad674a1e6c9d63e1ed7d8d4aef611aa56fed9
ssdeep: 6144:uLRofeDcww0B46dO7BHpR9lGAOidSPYQh6+N0McslPg6V:uLRswPVB4g3Ydf8Ohsn
type: PE32 executable (console) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright (C) 2020
InternalName: OG-Injector.exe
FileVersion: 1.0.0.1
CompanyName: Osiris&GOESP
ProductName: OG Injector
ProductVersion: 1.0.0.1
FileDescription: Osiris&GOESP Injector
OriginalFilename: OG-Injector.exe
Translation: 0x0409 0x04b0

Zusy.396023 also known as:

Lionic	Trojan.Win32.Zusy.4!c
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Zusy.396023
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_60% (W)
K7GW	Hacktool ( 700007861 )
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:TrojanX-gen [Trj]
BitDefender	Gen:Variant.Zusy.396023
MicroWorld-eScan	Gen:Variant.Zusy.396023
Ad-Aware	Gen:Variant.Zusy.396023
BitDefenderTheta	Gen:NN.ZexaF.34236.zu0@aKvSpVfi
McAfee-GW-Edition	RDN/Generic.grp
FireEye	Generic.mg.1667a3c232ab0ce3
Emsisoft	Gen:Variant.Zusy.396023 (B)
SentinelOne	Static AI – Suspicious PE
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
GData	Gen:Variant.Zusy.396023
AhnLab-V3	Malware/Win.Generic.R424729
McAfee	RDN/Generic.grp
MAX	malware (ai score=89)
TrendMicro-HouseCall	TROJ_GEN.R002H09JU21
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/PossibleThreat
AVG	Win32:TrojanX-gen [Trj]

How to remove Zusy.396023?

Zusy.396023 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X