Malware

Bulz.238485 (B) removal guide

Malware Removal

The Bulz.238485 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Bulz.238485 (B) virus can do?

  • Dynamic (imported) function loading detected
  • Possible date expiration check, exits too soon after checking local time
  • CAPE extracted potentially suspicious content
  • Authenticode signature is invalid
  • Binary compilation timestomping detected

How to determine Bulz.238485 (B)?


File Info:

name: D3C2F753E0379FEDB233.mlw
path: /opt/CAPEv2/storage/binaries/2616a4225f34739635c32df72b4f477fec10d8ce3e391feb57de9e43377cad44
crc32: 25B8EFEF
md5: d3c2f753e0379fedb233dd4bab285825
sha1: 134e263b9c1ea42cdad8bc96181489573514700f
sha256: 2616a4225f34739635c32df72b4f477fec10d8ce3e391feb57de9e43377cad44
sha512: 090bd823a6d5de18765ab606daec31d3b29aee7be0c1f4d7380d31833d7f78dc25c9bd4a7282fe056d12bdb915adf73d2bf23544a42ae1b1f7b02b410f7c8075
ssdeep: 12288:mNnBDWAidqPRcPH6pGVDxbPjCTVNTsSaU/6KxwEu5mL:2nBDDidqZcPH6krbPexNTR6r5
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T1BFD45B4AFA6852F1D063C17E89E6D64AF37170281B205BCB5751872E1E27BE5CA3F321
sha3_384: 03c4f3f704bc6b28dd02e3a4e2438e6a8c0d7cc73d0674e77fbbef284e5743977214115a614d14bbba07ffa9f2c471f9
ep_bytes: ff250020400000000000000000000000
timestamp: 2090-01-15 08:31:58

Version Info:

Translation: 0x0000 0x04b0
Comments:
CompanyName:
FileDescription: ConsoleApp1
FileVersion: 1.0.0.0
InternalName: ConsoleApp1.exe
LegalCopyright: Copyright © 2021
LegalTrademarks:
OriginalFilename: ConsoleApp1.exe
ProductName: ConsoleApp1
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

Bulz.238485 (B) also known as:

LionicTrojan.Win32.Bulz.4!c
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.Bulz.238485
FireEyeGeneric.mg.d3c2f753e0379fed
McAfeeArtemis!D3C2F753E037
SangforTrojan.Win32.Sabsik.FL
TrendMicro-HouseCallTROJ_GEN.R002H09AV22
BitDefenderGen:Variant.Bulz.238485
Ad-AwareGen:Variant.Bulz.238485
EmsisoftGen:Variant.Bulz.238485 (B)
McAfee-GW-EditionArtemis
SentinelOneStatic AI – Suspicious PE
APEXMalicious
GDataGen:Variant.Bulz.238485
AviraHEUR/AGEN.1236239
MicrosoftTrojan:Win32/Sabsik.TE.B!ml
CynetMalicious (score: 100)
ALYacGen:Variant.Bulz.238485
MAXmalware (ai score=82)
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/PossibleThreat
Cybereasonmalicious.3e0379

How to remove Bulz.238485 (B)?

Bulz.238485 (B) removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment