Malware

How to remove “Bulz.719764”?

Malware Removal

The Bulz.719764 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Bulz.719764 virus can do?

  • Dynamic (imported) function loading detected
  • CAPE extracted potentially suspicious content
  • .NET file is packed/obfuscated with Confuser
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Network activity detected but not expressed in API logs
  • Binary compilation timestomping detected

How to determine Bulz.719764?


File Info:

name: 67D2C07A2A823102D6E7.mlw
path: /opt/CAPEv2/storage/binaries/9380bbfe9feda0ec09d45657c939b6469d0a27bbdc40f57960e379142b0a8b4a
crc32: 3411AFAE
md5: 67d2c07a2a823102d6e70a6cc945bfea
sha1: 59941768cf9903236f324dc3b5a2be22cc1d4638
sha256: 9380bbfe9feda0ec09d45657c939b6469d0a27bbdc40f57960e379142b0a8b4a
sha512: 05b2a3462a3fa61085c53d21b6fabdf3c2d888b6c54ee056e4a848a32d79f283f07e4a1b13c1dc9174a5ec014ff9767ae2235cc4135794f85831ef0ee8ab05da
ssdeep: 98304:k6GQAv/8+5nq3tfk9x+Qh3Pvocwy3pR1qcn:k6yvU+5nq39k9x+Q6y3
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1DF2623AF62264846C261327C75EACBB846113F973839C1507BE77C53B9B1E4E161A8F3
sha3_384: c1ac72380fff75edf50d246725a98b6872a3a71323385ab57a16db4581fecf0dfcb9bf457d0fde7301d335746ca6aadb
ep_bytes: ff250020400000000000000000000000
timestamp: 2054-11-22 19:37:58

Version Info:

Comments:
CompanyName:
FileDescription: FiveM ModMenu (KEK)
FileVersion: 1.0.0.0
InternalName: New Moonlight UI.exe
LegalCopyright: Copyright © 2021
LegalTrademarks:
OriginalFilename: New KEK UI.exe
ProductName: FiveM ModMenu (KEK)
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0
Translation: 0x0000 0x04b0

Bulz.719764 also known as:

LionicTrojan.Win32.Bulz.4!c
MicroWorld-eScanGen:Variant.Bulz.719764
FireEyeGeneric.mg.67d2c07a2a823102
McAfeeArtemis!67D2C07A2A82
CylanceUnsafe
CyrenW32/MSIL_Kryptik.EHH.gen!Eldorado
SymantecML.Attribute.HighConfidence
APEXMalicious
BitDefenderGen:Variant.Bulz.719764
AvastWin32:Malware-gen
Ad-AwareGen:Variant.Bulz.719764
McAfee-GW-EditionBehavesLike.Win32.Generic.rc
EmsisoftGen:Variant.Bulz.719764 (B)
GDataGen:Variant.Bulz.719764
AviraHEUR/AGEN.1145805
MAXmalware (ai score=86)
GridinsoftRansom.Win32.Sabsik.sa
MicrosoftTrojan:MSIL/Tnega.SSS!MTB
CynetMalicious (score: 99)
ALYacGen:Variant.Bulz.719764
MalwarebytesTrojan.Downloader.MSIL.Generic
TrendMicro-HouseCallTROJ_GEN.R002H09KM21
MaxSecureTrojan.Malware.300983.susgen
FortinetPossibleThreat
AVGWin32:Malware-gen

How to remove Bulz.719764?

Bulz.719764 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment