Malware

Bulz.415550 malicious file

Malware Removal

The Bulz.415550 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Bulz.415550 virus can do?

  • Dynamic (imported) function loading detected
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • The executable is likely packed with VMProtect
  • Authenticode signature is invalid
  • Anomalous binary characteristics

How to determine Bulz.415550?


File Info:

name: C449459D0768CAFD3AFD.mlw
path: /opt/CAPEv2/storage/binaries/2f61fdb6f3d7ac8b9124e9d062254060ca352fb995d97aaced6379d03351141c
crc32: CA03FF7E
md5: c449459d0768cafd3afd8779aa608e74
sha1: 64760c9c6879b2e9140b18bbb93c3a1ed6a43b83
sha256: 2f61fdb6f3d7ac8b9124e9d062254060ca352fb995d97aaced6379d03351141c
sha512: c644622acf2db3dd7d99c03212817ce8f5543dafd2fbfb4e98cd900e13118f19590a09ff9a4ffe7a0fdcf30f10342c64073def8ab9760748950883dd0641b178
ssdeep: 49152:hGvFh4tIe045YBFfGCoUqGGvLnSCNSFVSNnXozuTksuCkSxGinuKYMTIgtTiaOTw:kNkIe0VOwwnKkNnXYuThuC5xGinuKYu6
type: PE32+ executable (console) x86-64, for MS Windows
tlsh: T188E5332D7F5C86D7DA4D4336E1A24194A7A0D617F28793A3252D28DE6DC3B309E062CF
sha3_384: 830c4ab86c0594e86eaf3c08c5280c1235a09403e769e0bcaf6a72e106fec662b2dc56ecff3a553a4da73422ac28002f
ep_bytes: 4d5a90000300000004000000ffff0000
timestamp: 2021-11-24 00:05:37

Version Info:

Translation: 0x0000 0x04b0
Comments:
CompanyName:
FileDescription: CrabWare
FileVersion: 1.0.0.0
InternalName: CrabWare.exe
LegalCopyright: Copyright © 2021
LegalTrademarks:
OriginalFilename: CrabWare.exe
ProductName: CrabWare
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

Bulz.415550 also known as:

Elasticmalicious (high confidence)
FireEyeGeneric.mg.c449459d0768cafd
ESET-NOD32a variant of MSIL/Packed.VMProtect.C suspicious
APEXMalicious
CynetMalicious (score: 100)
BitDefenderGen:Variant.Bulz.415550
MicroWorld-eScanGen:Variant.Bulz.415550
Ad-AwareGen:Variant.Bulz.415550
EmsisoftGen:Variant.Bulz.415550 (B)
IkarusTrojan.MSIL.Vmprotect
GDataGen:Variant.Bulz.415550
ArcabitTrojan.Bulz.D6573E
MicrosoftTrojan:Win32/Sabsik.FL.B!ml
ALYacGen:Variant.Bulz.415550
MAXmalware (ai score=89)
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.300983.susgen
PandaTrj/Orbond.A

How to remove Bulz.415550?

Bulz.415550 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment