MALICIOUS — 21c04195cc8a8a0c834d57e27e37691ca2c2b988fd3d76ef2b827dfa3ac700b1

MALICIOUS — 21c04195cc8a8a0c834d57e27e37691ca2c2b988fd3d76ef2b827dfa3ac700b1 is a pe sample analyzed by MalwareAnalyzer by Cyble with a malicious verdict (86/100), attributed to the Zusy family. 4 of 55 detection engines flagged it.

Identification

• SHA-256: 21c04195cc8a8a0c834d57e27e37691ca2c2b988fd3d76ef2b827dfa3ac700b1
• SHA-1: b8ed0f6804633288966a7749ab3bce154dfdd2d9
• MD5: d19aff0a4758cf94728df41e0190bd5f
• imphash: f34d5f2d4577ed6d9ceec516c1f5a744
• ssdeep: 1536:W8jc9LaykgCeAdZuZY/9JK/r7GHCbPUeN93uv7/0TbA3OKaQSDOxgtM4idF:W8ALamu4YvK/PGi1ZEQQSDG
• TLSH: T1293A4BC419E87225E5FEAD093048EAED3FCD0846E8BE6DD8610869B26078E1F4D35463
• Submitted as: 21c04195cc8a8a0c834d57e27e37691ca2c2b988fd3d76ef2b827dfa3ac700b1
• File type: pe · Size: 95376 bytes
• Verdict: malicious (86/100) · Family: Zusy

Detections (4 of 55 engines)

• ClamAV (daily): Win.Malware.Zusy-7709449-0
• Microsoft Defender: Trojan:MSIL/AgentTesla!pz
• Trellix Stinger (McAfee): Trojan-FTYO!D19AFF0A4758
• Kaspersky (KVRT): HEUR:Trojan.MSIL.Agent.gen

Why this verdict

The malicious score of 86/100 is the fusion of 1 weighted signal:

• ClamAV (daily) flagged Win.Malware.Zusy-7709449-0 (rule Win.Malware.Zusy-7709449-0) - engine signal, weight 0.90, confidence 0.95

Dynamic analysis

No runtime behaviour was captured for this sample, so the analysis above is static only. That is a limit of this run rather than evidence the sample does nothing.

More Zusy samples · Latest analyzed threats · ATT&CK coverage

Analyzed on MalwareAnalyzer by Cyble · Open interactive report