Categories: Malware

Zusy.481727 information

The Zusy.481727 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Zusy.481727 virus can do?

Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
The binary contains an unknown PE section name indicative of packing
The binary likely contains encrypted or compressed data.
The executable is compressed using UPX
Authenticode signature is invalid
CAPE detected the shellcode get eip malware family
Yara detections observed in process dumps, payloads or dropped files

How to determine Zusy.481727?


File Info:
name: EE860E3024CD967C1E55.mlwpath: /opt/CAPEv2/storage/binaries/d24f3797f2430417044de4888e09576dfe7585ca5eafa7a3d8cd1e308642f433crc32: 6B1E0B00md5: ee860e3024cd967c1e550738e2c50a14sha1: a83157d73a218fd856dafbdda978ff37230bfe04sha256: d24f3797f2430417044de4888e09576dfe7585ca5eafa7a3d8cd1e308642f433sha512: dbb606142a9bc8b1acf2ebee91ec8dbcb329af65f7b27360d3509ed338792edb831465a49ba23f71c0539ff742fd7381f06be73b4542768d0578da6c8aff981dssdeep: 98304:lfgGFDrtinZWMaLoTcmwWQKdJKtZlXXL7CJfO8:JFfwZWN2cpWQKdJQZlvCPtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1D70633C623364002CED968F982BD50739F5D36BAE78206CFB9833639A5C7922C375971sha3_384: e800ecd947e54417a431931214ce485a293ad6e3dffddb23d34277fdcc33d55942ae05399f7a890465aeb4aea5e82ea4ep_bytes: 60be00508e008dbe00c0b1ff5789e58dtimestamp: 2024-04-16 17:52:29
Version Info:
FileVersion: 1.0.0.0FileDescription: 易语言程序ProductName: 易语言程序ProductVersion: 1.0.0.0LegalCopyright: 作者版权所有 请尊重并使用正版Comments: 本程序使用易语言编写(http://www.eyuyan.com)Translation: 0x0804 0x04b0

Zusy.481727 also known as:

Bkav	W32.AIDetectMalware
AVG	Win32:CrypterX-gen [Trj]
Elastic	malicious (moderate confidence)
MicroWorld-eScan	Gen:Variant.Zusy.481727
Skyhigh	BehavesLike.Win32.Generic.wc
Cylance	unsafe
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_60% (D)
BitDefenderTheta	Gen:NN.ZexaF.36802.XpKfaiohCehH
Symantec	ML.Attribute.HighConfidence
tehtris	Generic.Malware
ESET-NOD32	a variant of Win32/Packed.FlyStudio.AA potentially unwanted
Cynet	Malicious (score: 100)
ClamAV	Win.Malware.Trojanx-9951053-0
Kaspersky	VHO:Trojan.Win32.Convagent.gen
BitDefender	Gen:Variant.Zusy.481727
Avast	Win32:CrypterX-gen [Trj]
Rising	Trojan.Yakes!8.430 (TFE:5:40EAeP6MV6V)
Emsisoft	Gen:Variant.Zusy.481727 (B)
VIPRE	Gen:Variant.Zusy.481727
Trapmine	malicious.moderate.ml.score
FireEye	Generic.mg.ee860e3024cd967c
Sophos	Generic ML PUA (PUA)
Ikarus	Trojan.Crypt
Varist	W32/Trojan.GRW.gen!Eldorado
Antiy-AVL	Trojan[Packed]/Win32.FlyStudio
Microsoft	Program:Win32/Wacapew.C!ml
Arcabit	Trojan.Zusy.D759BF
ZoneAlarm	VHO:Trojan.Win32.Convagent.gen
GData	Win32.Trojan.PSE.1BS1OJ0
Google	Detected
AhnLab-V3	Trojan/Win.Generic.R598722
ALYac	Gen:Variant.Zusy.481727
MAX	malware (ai score=88)
Malwarebytes	PUP.Optional.ChinAd
SentinelOne	Static AI – Malicious PE
MaxSecure	Dropper.Dinwod.frindll
Fortinet	W32/CoinMiner.PHP!tr
DeepInstinct	MALICIOUS