MALICIOUS — 4bccf1cb03ae885bef0c8643feb770ac3ceae288c991300617e03506ef2256a8

MALICIOUS — 4bccf1cb03ae885bef0c8643feb770ac3ceae288c991300617e03506ef2256a8 is a pe sample analyzed by MalwareAnalyzer by Cyble with a malicious verdict (86/100), attributed to the Zusy family. 4 of 52 detection engines flagged it.

Identification

• SHA-256: 4bccf1cb03ae885bef0c8643feb770ac3ceae288c991300617e03506ef2256a8
• SHA-1: 2ec1bf710ee252029f796c41ba32f870cd49ddbb
• MD5: 56e0fc642ec5dbf0a3420ae6478833ce
• imphash: 95122753ea27818b35f9b51859e4c692
• File type: pe · Size: 1958408 bytes
• Verdict: malicious (86/100) · Family: Zusy

Detections (4 of 52 engines)

• ClamAV (daily): Win.Malware.Zusy-9764479-0
• Kaspersky (KVRT): Backdoor.Win32.Salgorea.ic
• Microsoft Defender: Trojan:Win32/Salgorea!pz
• Emsisoft (Emergency Kit): Dump:Generic.Dacic.17983.C83B492E

Embedded URLs

• http://schemas.microsoft.com/SMI/2005/WindowsSettings

Embedded domains

• schemas.microsoft.com

More Zusy samples · Latest analyzed threats · ATT&CK coverage

Analyzed on MalwareAnalyzer by Cyble · Open interactive report