Categories: Malware

Zusy.428190 information

The Zusy.428190 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Zusy.428190 virus can do?

SetUnhandledExceptionFilter detected (possible anti-debug)
Sample contains Overlay data
Dynamic (imported) function loading detected
Reads data out of its own binary image
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine Zusy.428190?


File Info:
name: AE01C56503035B17F117.mlwpath: /opt/CAPEv2/storage/binaries/3bc29bf788dc9f2e5ad3839a37e964b3f3273298bf7920eb0a17dad8aa48dea7crc32: 8BEEBFB1md5: ae01c56503035b17f11711fe0904b8f6sha1: 67e45397cd1c9bc8a2d6c76c5f3e328d566301c4sha256: 3bc29bf788dc9f2e5ad3839a37e964b3f3273298bf7920eb0a17dad8aa48dea7sha512: 7cee0928e40d2e51bfa3889684b3a75e6a8177685421a083ad9dad91b0f0f93b62dd9435ee20273bc7bb0cf251ebb043d5fcf7d48461f87e9370336519dc7f13ssdeep: 12288:WZ3owANYUg8IFAIBmoWSXADBbqbEGDWT02EmTwvmKXAS17VWmiKvbKwN:WmTSzAIBmoWS+hq4brwvmyAS1orMtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T18FE40101B6C188B2D6B30D721A7AAB216A7DB8201F25C6CFF39C496DEF715C09635763sha3_384: d96757f8715bb6e693c94098717b3be1d92ab35ba3ea573f1f6d412978ac7c89c798310c745f5d131c85bdeb56019522ep_bytes: e866050000e978feffffcccccccccccctimestamp: 2021-10-08 08:51:51
Version Info:
0: [No Data]

Zusy.428190 also known as:

Bkav	W32.AIDetect.malware2
Elastic	malicious (high confidence)
FireEye	Generic.mg.ae01c56503035b17
VIPRE	Gen:Variant.Zusy.428190
BitDefender	Gen:Variant.Zusy.428190
Cybereason	malicious.503035
Arcabit	Trojan.Zusy.D6889E
Cyren	W32/MSIL_Bladabindi.ER.gen!Eldorado
ESET-NOD32	a variant of MSIL/Bladabindi.AY
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	HEUR:Trojan.MSIL.Generic
MicroWorld-eScan	Gen:Variant.Zusy.428190
Rising	Backdoor.njRAT!1.9E49 (CLASSIC)
Ad-Aware	Gen:Variant.Zusy.428190
Sophos	Generic ML PUA (PUA)
Comodo	TrojWare.MSIL.Bladabindi.BGS@7lngf6
Zillya	Trojan.Bingoml.Win32.7603
McAfee-GW-Edition	BehavesLike.Win32.Generic.jc
Emsisoft	Gen:Variant.Zusy.428190 (B)
Ikarus	Trojan.Scar
MAX	malware (ai score=83)
Microsoft	Backdoor:MSIL/Bladabindi.AL
ZoneAlarm	HEUR:Trojan.MSIL.Generic
GData	Gen:Variant.Zusy.428190
Acronis	suspicious
VBA32	Trojan.Meterpreter
ALYac	Gen:Variant.Zusy.428190
SentinelOne	Static AI – Malicious SFX
BitDefenderTheta	Gen:NN.ZexaF.34786.QyZ@a8d2d8bO
AVG	MSIL:GenMalicious-EA [Trj]
Avast	MSIL:GenMalicious-EA [Trj]