Categories: Malware

Bulz.6910 malicious file

The Bulz.6910 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Bulz.6910 virus can do?

CAPE extracted potentially suspicious content
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Binary compilation timestomping detected

How to determine Bulz.6910?


File Info:
name: BA20ECE865F4A6B89D04.mlwpath: /opt/CAPEv2/storage/binaries/2c62eb780501df626d3ca37ea460607a1e620903b6f401c61434e667ffd642dbcrc32: 835934F0md5: ba20ece865f4a6b89d040cd29d3dad78sha1: 719dd48703b553a95c4ea43ef6b5ce018ae4a11dsha256: 2c62eb780501df626d3ca37ea460607a1e620903b6f401c61434e667ffd642dbsha512: 879514aa44d6d4178785b5eec373fd9952cd52addfdf449a400bd1bf2a976e1898c280d1de847c6a32213f9504e6a7691b57e6242738f73710914c571ea388a1ssdeep: 196608:7sM8wCZ2BTvixQxZUmqmsvnAgcl/9W3ZnWEp1:IBK6QLUxmSG9uWEDtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T17976337B16714194C0D9CC398537BDF1B2F10E7A8F86A875B55BB9C232328A6F612C27sha3_384: 030d04b452e470f45c4b223eebdc205492a2bc0f32707522c14202703770d91d6e45cf68ffdf59a42a074cf888306966ep_bytes: ff250020400000000000000000000000timestamp: 2082-12-16 05:40:03
Version Info:
Translation: 0x0000 0x04b0Comments: DishaCompanyName: DishaFileDescription: DishaFileVersion: 1.0.0.0InternalName: WindowsApp6.exeLegalCopyright: Disha ©  2020LegalTrademarks: OriginalFilename: WindowsApp6.exeProductName: DishaProductVersion: 1.0.0.0Assembly Version: 1.0.0.0

Bulz.6910 also known as:

Bkav	W32.AIDetectMalware.CS
Lionic	Trojan.Win32.Generic.4!c
DrWeb	Trojan.Siggen7.35352
MicroWorld-eScan	Gen:Variant.Bulz.6910
FireEye	Generic.mg.ba20ece865f4a6b8
Skyhigh	BehavesLike.Win32.Generic.vc
McAfee	Artemis!BA20ECE865F4
Cylance	unsafe
Sangfor	Suspicious.Win32.Save.a
K7AntiVirus	Trojan ( 700000121 )
Alibaba	TrojanDropper:Win32/Dapato.30c45d6f
K7GW	Trojan ( 700000121 )
CrowdStrike	win/malicious_confidence_100% (W)
BitDefenderTheta	Gen:NN.ZemsilF.36802.@p0@aCvyAKm
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/GenKryptik.DYVF
APEX	Malicious
Kaspersky	Trojan-Dropper.Win32.Dapato.qhli
BitDefender	Gen:Variant.Bulz.6910
NANO-Antivirus	Trojan.Win32.Dapato.hpospj
Avast	Win32:Evo-gen [Trj]
Tencent	Win32.Trojan-Dropper.Dapato.Twhl
Emsisoft	Gen:Variant.Bulz.6910 (B)
F-Secure	Heuristic.HEUR/AGEN.1307822
Zillya	Dropper.Dapato.Win32.78904
Trapmine	suspicious.low.ml.score
Sophos	Mal/VMProtBad-A
Ikarus	Trojan.Black
Jiangmin	TrojanDropper.Dapato.ackb
Google	Detected
Avira	HEUR/AGEN.1307822
Antiy-AVL	Trojan[Dropper]/Win32.Dapato
Microsoft	Trojan:Win32/Wacatac.B!ml
Xcitium	Malware@#25lpq12k87ukb
Arcabit	Trojan.Bulz.D1AFE
ZoneAlarm	Trojan-Dropper.Win32.Dapato.qhli
GData	Gen:Variant.Bulz.6910
VBA32	TScope.Malware-Cryptor.SB
ALYac	Gen:Variant.Bulz.6910
MAX	malware (ai score=87)
Malwarebytes	Generic.Malware/Suspicious
Panda	Trj/GdSda.A
Rising	Malware.Obfus/MSIL@AI.92 (RDM.MSIL2:kEzo/8dmpPiUaEhJIfhgUg)
SentinelOne	Static AI – Suspicious PE
Fortinet	MSIL/Agent.BVF!tr
AVG	Win32:Evo-gen [Trj]
DeepInstinct	MALICIOUS