Categories: Malware

Zusy.413541 (file analysis)

The Zusy.413541 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Zusy.413541 virus can do?

SetUnhandledExceptionFilter detected (possible anti-debug)
Dynamic (imported) function loading detected
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Zusy.413541?


File Info:
name: EA1C50A68B7FCEC38350.mlwpath: /opt/CAPEv2/storage/binaries/94200c847b2d5feb25604121f384b4012c0dfa9002ab7b69399a6919d599c3a4crc32: FE14AB4Emd5: ea1c50a68b7fcec38350ae3318ecab1dsha1: cea5f9d63b7ea85aecf36d6129a2d1b69379f90csha256: 94200c847b2d5feb25604121f384b4012c0dfa9002ab7b69399a6919d599c3a4sha512: 4aabf58b9e76fbe500153cbb538c5edd034f8cf4d9573d13a47416a31618c7825c113272714ec46a2a3518a3af001aa332a9dbb5603158e57921ecb2dd8d69c0ssdeep: 12288:nHZ3/aBE6Pq+rlNTKCPnX79MlZISAY+7JG0ECgOF0VwTCeF9dSXg133slhrXlp+X:SHHXXylZgNLgOF0VgAOQhxWbASTjU7IFtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1EEE48DDDEB9941E7C028B839CCE58B60E9279A40E952527F1D0EF22F4471562ED3A3F4sha3_384: 20e9f7a11d036a6ef1afb698a8f0ef1925f659965c9fbd72399f2c0fddad029404f45bf67e737ec3ac2cbbb5ce35d3daep_bytes: f8732246865a94712e2ef8eeff241ab4timestamp: 2022-01-21 10:09:09
Version Info:
FileVersion: 1.0.0.0FileDescription: 易语言程序ProductName: 易语言程序ProductVersion: 1.0.0.0LegalCopyright: 作者版权所有 请尊重并使用正版Comments: 本程序使用易语言编写(http://www.eyuyan.com)Translation: 0x0804 0x04b0

Zusy.413541 also known as:

Bkav	W32.AIDetect.malware1
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Zusy.413541
FireEye	Generic.mg.ea1c50a68b7fcec3
ALYac	Gen:Variant.Zusy.413541
Cylance	Unsafe
Sangfor	Riskware.Win32.Convagent.gen
K7AntiVirus	Trojan ( 0040f54a1 )
Alibaba	Trojan:Win32/Farfli.41b1203a
K7GW	Trojan ( 00539b2c1 )
Cybereason	malicious.68b7fc
BitDefenderTheta	Gen:NN.ZexaF.34182.Qu0@ayjx!bbb
Cyren	W32/A-8128ee96!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Packed.FlyStudio.AA potentially unwanted
TrendMicro-HouseCall	TROJ_GEN.R035C0PAV22
Paloalto	generic.ml
Kaspersky	Packed.Multi.MultiPacked.gen
BitDefender	Gen:Variant.Zusy.413541
NANO-Antivirus	Virus.Win32.Agent.dvixmz
Avast	Win32:Pasta [Cryp]
Emsisoft	Gen:Variant.Zusy.413541 (B)
Comodo	TrojWare.Win32.Agent.OSCF@5rs7jr
TrendMicro	TROJ_GEN.R035C0PAV22
McAfee-GW-Edition	BehavesLike.Win32.Generic.jc
Sophos	W32/Pidgeon-A
Jiangmin	Packed.Multi.jzw
eGambit	Unsafe.AI_Score_99%
Avira	TR/Farfli.kofrz
Antiy-AVL	Trojan/Generic.ASMalwS.351D1B8
Gridinsoft	Ransom.Win32.Sabsik.sa
Microsoft	Trojan:Win32/Farfli.B!MTB
ZoneAlarm	VHO:Packed.Win32.Convagent.gen
GData	Win32.Application.PUPStudio.A
Cynet	Malicious (score: 100)
AhnLab-V3	Packed/Win.MultiPacked.R467935
McAfee	Flyagent.d
MAX	malware (ai score=85)
VBA32	Trojan.Sabsik.FL
Malwarebytes	PUP.Optional.ChinAd
APEX	Malicious
Tencent	Win32.Packed.Multipacked.Ajlk
SentinelOne	Static AI – Malicious PE
MaxSecure	Dropper.Dinwod.frindll
Fortinet	W32/CoinMiner.BELF!tr
AVG	Win32:Pasta [Cryp]
Panda	Trj/Genetic.gen
CrowdStrike	win/malicious_confidence_70% (D)