Categories: Malware

Bulz.213096 (file analysis)

The Bulz.213096 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Bulz.213096 virus can do?

Creates RWX memory
Drops a binary and executes it
The binary likely contains encrypted or compressed data.
Installs itself for autorun at Windows startup
Creates a copy of itself

Related domains:

updat.duckdns.org

How to determine Bulz.213096?


File Info:
crc32: 58B3FD2Cmd5: b8939612bc721796c77eb254ef8ab262name: B8939612BC721796C77EB254EF8AB262.mlwsha1: 94eb908de098f6b41cf593fbab24c585815a000csha256: 249bed9b89af07f4257c55f5bbed8fb24890e9bc2ddde6031449332b3676574dsha512: 39293e4fa8e6caac6465377e7d4af5cca51b076a484a6fd3a0022a26a9e38ee777705fb2dfa035dfa8bb5683aa1e1ef36446fde6cfeb727d92cf759e8667303assdeep: 1536:pI4Xl67aG5ISwX/y5L0PY1tBJv8K7mItVTbST9HAYE:KuAaGCTXKV8CHVXGAYtype: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Version Info:
0: [No Data]

Bulz.213096 also known as:

Lionic	Trojan.Win32.Generic.4!c
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Bulz.213096
Cylance	Unsafe
Sangfor	Riskware.MSIL.Confuser.mt
CrowdStrike	win/malicious_confidence_100% (D)
Cybereason	malicious.2bc721
Cyren	W32/Razy.BE.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/Bladabindi.FM.gen
APEX	Malicious
Avast	Win32:Malware-gen
ClamAV	Win.Packed.Hpbladabi-6860330-0
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Gen:Variant.Bulz.213096
NANO-Antivirus	Trojan.Win32.Bladabindi.ewpvmc
MicroWorld-eScan	Gen:Variant.Bulz.213096
Tencent	Win32.Trojan.Generic.Pgwh
Ad-Aware	Gen:Variant.Bulz.213096
Sophos	Mal/Generic-S
Comodo	Malware@#3d75udabyv31l
BitDefenderTheta	Gen:NN.ZemsilF.34266.emW@auprXEg
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	BehavesLike.Win32.Generic.lh
FireEye	Generic.mg.b8939612bc721796
Emsisoft	Gen:Variant.Bulz.213096 (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	TrojanDropper.Autoit.dce
Avira	HEUR/AGEN.1112906
Antiy-AVL	Trojan/Generic.ASBOL.38BB
Kingsoft	Win32.Troj.Undef.(kcloud)
Microsoft	Backdoor:MSIL/Bladabindi
GData	Gen:Variant.Bulz.213096
AhnLab-V3	Trojan/Win32.Bladabindi.C424783
Acronis	suspicious
McAfee	GenericRXAA-EL!B8939612BC72
MAX	malware (ai score=99)
Malwarebytes	Trojan.InfoStealer.FRGen
Panda	Trj/GdSda.A
Yandex	Trojan.Agent!sRur7WPjAg4
Ikarus	Trojan.MSIL.Injector
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	MSIL/Injecto.58E1!tr
AVG	Win32:Malware-gen
Paloalto	generic.ml