Malware

Bulz.417030 (file analysis)

Malware Removal

The Bulz.417030 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Bulz.417030 virus can do?

  • Unconventionial language used in binary resources: Vietnamese
  • The binary likely contains encrypted or compressed data.
  • The executable is likely packed with VMProtect

How to determine Bulz.417030?


File Info:

crc32: F784A0F2
md5: c0b8b0502974936fc156c4b0582c9c1a
name: C0B8B0502974936FC156C4B0582C9C1A.mlw
sha1: fa7340dea7e5bd6e7a70f8d33f9cebb804a61baf
sha256: 9f8fbdade8e7095ffc822be562f2a0b7ecd9dafd15496a6b8a8973b8cc2ee3c4
sha512: 8a8489f8cfbd7c619576b53ad8e60ed541ab8a6d54215cfc65e91b7881d8b9526edfe34564e8a7d573a0c3945669308587ab813e5569f1e8072786392a518e57
ssdeep: 24576:OgHv9sohYux8KB9FhBagwPSrA/q+rPuSVa34s1pMoM72Go06tQOjNkC:Og+Kx8SFLagoSrACcPm44V0ho7SOjNk
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

Translation: 0x0000 0x04b0
LegalCopyright:
Assembly Version: 0.0.0.0
InternalName: StelyStub.exe
FileVersion: 0.0.0.0
ProductVersion: 0.0.0.0
FileDescription:
OriginalFilename: StelyStub.exe

Bulz.417030 also known as:

Elasticmalicious (high confidence)
CynetMalicious (score: 100)
ALYacGen:Variant.Bulz.417030
MalwarebytesRansom.Blocker.MSIL
SangforTrojan.Win32.Save.a
Cybereasonmalicious.ea7e5b
ESET-NOD32a variant of MSIL/Kryptik.TWQ
APEXMalicious
AvastWin32:MalwareX-gen [Trj]
BitDefenderGen:Variant.Bulz.417030
MicroWorld-eScanGen:Variant.Bulz.417030
Ad-AwareGen:Variant.Bulz.417030
BitDefenderThetaGen:NN.ZemsilF.34670.qv0@aOmZDraG
FireEyeGeneric.mg.c0b8b0502974936f
EmsisoftGen:Variant.Bulz.417030 (B)
AviraTR/Dropper.Gen
GDataGen:Variant.Bulz.417030
MAXmalware (ai score=81)
SentinelOneStatic AI – Malicious PE
eGambitUnsafe.AI_Score_99%
AVGWin32:MalwareX-gen [Trj]
Qihoo-360HEUR/QVM03.0.5C5F.Malware.Gen

How to remove Bulz.417030?

Bulz.417030 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment