Categories: Malware

Bulz.559602 (B) removal

The Bulz.559602 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Bulz.559602 (B) virus can do?

SetUnhandledExceptionFilter detected (possible anti-debug)
Dynamic (imported) function loading detected
Reads data out of its own binary image
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
Harvests cookies for information gathering

How to determine Bulz.559602 (B)?


File Info:
name: B5F974D256C95A3CDC54.mlwpath: /opt/CAPEv2/storage/binaries/7c34ee835e1b8ef4ab061fb2263b4436efe83ce8d1daa505cf07ec82626e3cbccrc32: 007BB226md5: b5f974d256c95a3cdc54965117b53c92sha1: 3a027195ed6335026855e7c16ff10e0c9083d128sha256: 7c34ee835e1b8ef4ab061fb2263b4436efe83ce8d1daa505cf07ec82626e3cbcsha512: fe09997389e84762372ab61eab697644b922bac3d55ecec28cd462b6a2f8068aa8ca8d90873bd28b167755242f066c86d5f1b6e856a66718c193b6f27dcd1a38ssdeep: 49152:B84rAjvpaCaCnE3JviTivC5cH8Px2CmTXC9BcGKLHr7fzAbvtUxc/wg41gv2kiS7:BopaCaCoKmc4rAneHri1gcb419keetype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T131E52203B4CC45F2D16C1D705C69FB1C592B7E201A348D0A6F98F95AAB3319196B3BBEsha3_384: adbb635c17f12d9cfc6afe7423872225995785656542ec39d9d8d58a0bc16c8bdf8c8da831916f5a8a660ba6b93cd98cep_bytes: e864040000e988feffff3b0d68e64300timestamp: 2021-06-11 09:16:47
Version Info:
0: [No Data]

Bulz.559602 (B) also known as:

Bkav	W32.AIDetect.malware2
Cynet	Malicious (score: 100)
Cyren	W32/Renos.TYAH-0409
ESET-NOD32	Win32/TrojanDropper.Binder.NBH
APEX	Malicious
Kaspersky	HackTool.Win32.Binder.bs
BitDefender	Gen:Variant.Bulz.559602
NANO-Antivirus	Trojan.Win32.DarkKomet.ecawjb
MicroWorld-eScan	Gen:Variant.Bulz.559602
Avast	Win32:Dh-A [Heur]
Ad-Aware	Gen:Variant.Bulz.559602
Sophos	Generic ML PUA (PUA)
Comodo	TrojWare.Win32.TrojanDropper.Binder.cls@4m6ovz
DrWeb	Trojan.MulDrop2.39589
Zillya	Trojan.Agent.Win32.2205396
McAfee-GW-Edition	BehavesLike.Win32.Generic.vc
FireEye	Generic.mg.b5f974d256c95a3c
Emsisoft	Gen:Variant.Bulz.559602 (B)
SentinelOne	Static AI – Suspicious PE
GData	Gen:Variant.Bulz.559602
Antiy-AVL	Trojan/Generic.ASBOL.C91
Arcabit	Trojan.Bulz.D889F2
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
VBA32	Binder.Celesty
ALYac	Gen:Variant.Bulz.559602
MAX	malware (ai score=86)
Malwarebytes	Trojan.Binded
Rising	Malware.Heuristic!ET#89% (RDMK:cmRtazrwoyJ1plqGXuFZSNrA0Im3)
BitDefenderTheta	Gen:NN.ZexaF.34084.9AZ@aGAcSsmO
AVG	Win32:Dh-A [Heur]
Cybereason	malicious.256c95