Bulz.331601 malicious file

The Bulz.331601 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Bulz.331601 virus can do?

CAPE extracted potentially suspicious content
Authenticode signature is invalid

How to determine Bulz.331601?


File Info:
name: 60C90B4B9C12B8FEE511.mlw
path: /opt/CAPEv2/storage/binaries/7890ad5b61e82b66b9b3824c3a31c0728248aecb80b47d0b6aaa8e72bc68957c
crc32: 2C5C173A
md5: 60c90b4b9c12b8fee511431ad1ae76cd
sha1: 0b60d1ebfe5c3ede33066fb58f0b040ccbdfec0d
sha256: 7890ad5b61e82b66b9b3824c3a31c0728248aecb80b47d0b6aaa8e72bc68957c
sha512: c2752fd1e81028f8e3c6e216d9f974f080a4a8ce867e44e20a777d79926a837f901a134a7055eea75be2ebe28ea2bcd4714c639552c27d746b13da2d75dd4dc9
ssdeep: 192:9amG1w1TGCVVMKun8xP9/ayaM0ErmHQpC1KGIW1YvaLYTaTDiPNAvLdSbWtAd:9U16x31lx6M+QEKfOYTaTDiyUbW+
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1D152F8559BC49378DDBA0B7354B7464216B2FE008A8BEB2F55C4B1699DB32808723F31
sha3_384: 7240131823f891c40b57ca7a34a72638eed1cc438fa177f9ba0670ed2b264a51fb93590c13178cefceda9fc43e15ca11
ep_bytes: ff250020400000000000000000000000
timestamp: 2021-01-25 10:06:01

Version Info:
Translation: 0x0000 0x04b0
Comments: 
CompanyName: 
FileDescription: SupermarketManagementsystem
FileVersion: 1.0.0.0
InternalName: SupermarketManagementsystem.exe
LegalCopyright: Copyright ©  2018
LegalTrademarks: 
OriginalFilename: SupermarketManagementsystem.exe
ProductName: SupermarketManagementsystem
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

Bulz.331601 also known as:

Bkav	W32.AIDetectMalware.CS
Lionic	Trojan.Win32.Bulz.4!c
MicroWorld-eScan	Gen:Variant.Bulz.331601
Skyhigh	Artemis
McAfee	Artemis!60C90B4B9C12
Cylance	unsafe
Sangfor	Trojan.Win32.Wacatac.B
Alibaba	TrojanDropper:MSIL/GenMalicious.0aac29a9
Arcabit	Trojan.Bulz.D50F51
BitDefenderTheta	Gen:NN.ZemsilF.36680.am0@aqhiWrg
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
Cynet	Malicious (score: 99)
BitDefender	Gen:Variant.Bulz.331601
Avast	MSIL:GenMalicious-BJR [Trj]
Emsisoft	Gen:Variant.Bulz.331601 (B)
F-Secure	Trojan.TR/Dropper.Gen
VIPRE	Gen:Variant.Bulz.331601
Ikarus	Trojan.MSIL.Injector
Avira	TR/Dropper.Gen
Microsoft	Trojan:Win32/Wacatac.B!ml
GData	Gen:Variant.Bulz.331601
Google	Detected
AhnLab-V3	Malware/Gen.RL_Reputation.C4315021
Malwarebytes	Generic.Malware/Suspicious
Rising	Dropper.Generic!8.35E (CLOUD)
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	Malicious_Behavior.SB
AVG	MSIL:GenMalicious-BJR [Trj]
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_90% (W)

How to remove Bulz.331601?

Bulz.331601 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X