About “Bulz.533227” infection

The Bulz.533227 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Bulz.533227 virus can do?

Unconventionial language used in binary resources: Arabic (Libya)
.NET file is packed/obfuscated with Confuser
Authenticode signature is invalid

How to determine Bulz.533227?


File Info:
name: 35182DB6273CE1B0B1BB.mlw
path: /opt/CAPEv2/storage/binaries/1b7dfeef9add74258ed80395361b9a165ef3ffdea470988c159a4693d4c35b3e
crc32: C9702C25
md5: 35182db6273ce1b0b1bbb81e4d30c69e
sha1: c1e95fb0fe6eff4dcebdf5524b9d49cd74b52199
sha256: 1b7dfeef9add74258ed80395361b9a165ef3ffdea470988c159a4693d4c35b3e
sha512: dc61a4ca2b47c065ca3fbddcdb80fc27b48cf4a8995f327ccec6858b7ff48f3661e301d01d156ced9fdea20b444aeed9f0bc2986e9114462888ffe9d921edca0
ssdeep: 3072:t12Pca8EtN/Wc2Lpct/sx7c4xs3KehjHUZXoRH79wZ3rnu:t1jL+dsq4xN5oRb9wZ3
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T160D4CE88BED487BBC96F4DB7CD9FCED682A0FF462603A24335847AA036D5B815101B57
sha3_384: fc8d45dba60539efa91d8c86b22d9d6b29b7a33385aad1f8f7bc5f8a28684a40c435e5fb6b496e611733beca8f3d3b91
ep_bytes: ff250020400000000000000000000000
timestamp: 2021-06-23 23:17:08

Version Info:
0: [No Data]

Bulz.533227 also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Bulz.533227
FireEye	Generic.mg.35182db6273ce1b0
CAT-QuickHeal	Backdoor.MsilFC.S23226491
McAfee	GenericRXAA-FA!35182DB6273C
Cylance	Unsafe
Sangfor	Suspicious.Win32.Save.a
K7AntiVirus	Trojan ( 700000121 )
K7GW	Trojan ( 700000121 )
Cybereason	malicious.0fe6ef
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Paloalto	generic.ml
Cynet	Malicious (score: 100)
Kaspersky	HEUR:Backdoor.MSIL.Generic
BitDefender	Gen:Variant.Bulz.533227
Avast	Win32:Malware-gen
Rising	Malware.Obfus/MSIL@AI.100 (RDM.MSIL:uqzFbcgwl7SkYu141WuJng)
Ad-Aware	Gen:Variant.Bulz.533227
Sophos	Mal/Generic-S
DrWeb	Trojan.Inject4.13078
McAfee-GW-Edition	BehavesLike.Win32.Generic.hz
Emsisoft	Gen:Variant.Bulz.533227 (B)
SentinelOne	Static AI – Malicious PE
GData	Gen:Variant.Bulz.533227
Jiangmin	Backdoor.MSIL.eyec
Avira	TR/Dropper.MSIL.Gen
MAX	malware (ai score=89)
Antiy-AVL	Trojan/Generic.ASMalwS.33A7443
ZoneAlarm	HEUR:Backdoor.MSIL.Generic
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
AhnLab-V3	Trojan/Win.Generic.C4533183
BitDefenderTheta	Gen:NN.ZemsilF.34182.LmW@aOHUbMmG
ALYac	Gen:Variant.Bulz.533227
VBA32	TScope.Trojan.MSIL
Tencent	Msil.Backdoor.Generic.Lhdg
Yandex	Trojan.Kryptik!hTaTfqw5NfU
Ikarus	Trojan.Msil
Fortinet	PossibleThreat
AVG	Win32:Malware-gen
Panda	Trj/CI.A
CrowdStrike	win/malicious_confidence_90% (W)

How to remove Bulz.533227?

Bulz.533227 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X