Categories: Malware

Zusy.530656 (file analysis)

The Zusy.530656 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Zusy.530656 virus can do?

Unconventionial language used in binary resources: Korean
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine Zusy.530656?


File Info:
name: EF321ED12E634A6B5FB0.mlwpath: /opt/CAPEv2/storage/binaries/9f9f42fab11c32eb8281ea0917ca4a88fe317f24272aba5a70bbfd2f0c986899crc32: 4F129B5Fmd5: ef321ed12e634a6b5fb074b2a16cd96esha1: ea3fc00b0afe3b10b2ef4ec353ff48a514e49527sha256: 9f9f42fab11c32eb8281ea0917ca4a88fe317f24272aba5a70bbfd2f0c986899sha512: ddd860046463f06472f8aa1aef6246f1192db4b307894e4e689b5c49e82f2f227ebe3fb03b5a0bd1d2884d95249c37c35b1c64a52928c0aedbeb58cafbcb3b68ssdeep: 98304:fNGaubrXDc6fr8onS+P3zJIz9mT8mfSu19+tiObfvID:f2XY6j8o/P3z1T51WbIDtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T173469E207506C075D99111B5D86CBFFF46ACAC309FA545D3A3C43E2EADB06D23A3299Bsha3_384: 45f6913cfb593b2be13958afa1d4b744d6057805a7d227a289c1a1ea8175bc1b4dbb49667058080b40eaa599de8cd260ep_bytes: e827090000e935feffff8b4df464890dtimestamp: 2023-12-14 02:37:05
Version Info:
CompanyName: Alphie2FileDescription: Alphie2FileVersion: 1.0.40999.1InternalName: Alphie2LegalCopyright: Copyright (C) 2023-2024OriginalFilename: Alphie2.exeProductName: Alphie2ProductVersion: 1, 0, 0, 0Translation: 0x0800 0x03b5

Zusy.530656 also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Generic.4!c
MicroWorld-eScan	Gen:Variant.Zusy.530656
FireEye	Gen:Variant.Zusy.530656
Skyhigh	BehavesLike.Win32.Dropper.th
McAfee	GenericRXAA-AA!EF321ED12E63
Cylance	unsafe
VIPRE	Gen:Variant.Zusy.530656
BitDefender	Gen:Variant.Zusy.530656
Arcabit	Trojan.Zusy.D818E0
Symantec	ML.Attribute.HighConfidence
Cynet	Malicious (score: 100)
Avast	Win32:MalwareX-gen [Trj]
Ad-Aware	Gen:Variant.Zusy.530656
Sophos	Mal/Generic-S
Emsisoft	Gen:Variant.Zusy.530656 (B)
Antiy-AVL	Trojan/Win32.Agent
Microsoft	Trojan:Win32/ScarletFlash.A
GData	Gen:Variant.Zusy.530656
AhnLab-V3	Trojan/Win.Generic.R629138
VBA32	BScope.Trojan.Inject
ALYac	Gen:Variant.Zusy.530656
MAX	malware (ai score=86)
Malwarebytes	Generic.Malware/Suspicious
Panda	Trj/Chgt.AD
TrendMicro-HouseCall	TROJ_GEN.R002H09LE23
Rising	Trojan.Znyonm!8.18A3A (TFE:5:EoX2uATmgQL)
MaxSecure	Trojan.Malware.221575978.susgen
Fortinet	Malicious_Behavior.SB
AVG	Win32:MalwareX-gen [Trj]
DeepInstinct	MALICIOUS