Categories: Malware

About “Zusy.473197” infection

The Zusy.473197 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Zusy.473197 virus can do?

Sample contains Overlay data
Presents an Authenticode digital signature
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine Zusy.473197?


File Info:
name: 1EE151E540FB8A6D4935.mlwpath: /opt/CAPEv2/storage/binaries/989a523988a932ceeb8bdf419d97bdca303da7f23ddcd4d14539e607d03020cbcrc32: 3D0BA8F0md5: 1ee151e540fb8a6d493508cc8fc3f01esha1: 9e4e5abda0d8bdfa5bbe665090d1439b18444d3bsha256: 989a523988a932ceeb8bdf419d97bdca303da7f23ddcd4d14539e607d03020cbsha512: 36c201fc02ab6ffd2ef2ae79a00f0c482768209e0caa6ef4516a0489d782f781c688967f47ea1dbc7f1a675d0e3119108c867fdeba31418c6239b4b312db4466ssdeep: 6144:gV0g8uqI4jwkREvA7MZi/AaOU6uAlTxGj0CeJQJQmZ:/gjr4PYaOU6xTxTQJQmZtype: PE32 executable (console) Intel 80386, for MS Windowstlsh: T12454AE176F40D53AC01FDC7528AA8B79CE65BD351B6452C37BC2452A9A383F1A6BC2CCsha3_384: 653e4a35fe598c1e14e4519a396fc7019e7cc237f2d50b5abe5f97597ce579181eec23736b724eb3ffdc8102a8859cddep_bytes: e82a680000e9a4feffff6a0c68501f42timestamp: 2023-06-18 07:33:56
Version Info:
Comments: This is a legitimate application.CompanyName: Georgia CapitalFileDescription: Georgia Capital ProductFileVersion: 653InternalName: xMWNeGXRe7mrLegalCopyright: © Georgia Capital All rights reserved.LegalTrademarks: © Georgia Capital TrademarksOriginalFilename: gJjqY0Ce.exeProductName: dEKa80oRcWProductVersion: 653Translation: 0x0407 0x04b0

Zusy.473197 also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Stealer.12!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Zusy.473197
FireEye	Generic.mg.1ee151e540fb8a6d
CAT-QuickHeal	Trojan.GenericPMF.S30319961
Skyhigh	BehavesLike.Win32.Generic.dh
ALYac	Gen:Variant.Zusy.473197
Cylance	unsafe
VIPRE	Gen:Variant.Zusy.473197
Sangfor	Infostealer.Win32.Kryptik.Vm3f
K7AntiVirus	Trojan ( 005a75591 )
Alibaba	TrojanSpy:Win32/Stealer.d7a85e89
K7GW	Trojan ( 005a75591 )
BitDefenderTheta	Gen:NN.ZexaF.36804.su2@a4KM0Zbi
VirIT	Trojan.Win32.Genus.RKD
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/GenKryptik.GKWT
APEX	Malicious
Paloalto	generic.ml
ClamAV	Win.Malware.Pwsx-10004807-0
Kaspersky	HEUR:Trojan-Spy.Win32.Stealer.pef
BitDefender	Gen:Variant.Zusy.473197
NANO-Antivirus	Trojan.Win32.Stealer.jxedcs
Avast	Win32:TrojanX-gen [Trj]
Tencent	Trojan-DL.Win32.Deyma.kd
Emsisoft	Gen:Variant.Zusy.473197 (B)
F-Secure	Heuristic.HEUR/AGEN.1364950
DrWeb	Trojan.PWS.Stealer.35843
Zillya	Trojan.Stealer.Win32.113335
Trapmine	malicious.high.ml.score
Sophos	Troj/Krypt-ZM
Ikarus	Trojan.Win32.Redline
GData	Win32.Trojan.PSE.164AIIY
Jiangmin	TrojanSpy.Stealer.aioz
Webroot	W32.Trojan.Gen
Google	Detected
Avira	HEUR/AGEN.1364950
Varist	W32/Stealer.EA.gen!Eldorado
Antiy-AVL	Trojan/Win32.GenKryptik
Kingsoft	Win32.Troj.Unknown.a
Arcabit	Trojan.Zusy.D7386D
ZoneAlarm	HEUR:Trojan-Spy.Win32.Stealer.pef
Microsoft	Trojan:Win32/RedLineStealer.EN!MTB
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win.Generic.C5443150
McAfee	Artemis!1EE151E540FB
MAX	malware (ai score=83)
VBA32	BScope.TrojanPSW.RedLine
Malwarebytes	Generic.Malware.AI.DDS
Panda	Trj/Genetic.gen
Rising	Trojan.Kryptik!8.8 (TFE:5:u5ZXrIA6OcE)
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.121218.susgen
Fortinet	W32/Kryptik.HSYN!tr
AVG	Win32:TrojanX-gen [Trj]
DeepInstinct	MALICIOUS
alibabacloud	Trojan[spy]:Win/RedLineStealer.EN!MTB