Categories: Malware

About “Bulz.898352” infection

The Bulz.898352 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Bulz.898352 virus can do?

Reads data out of its own binary image
Drops a binary and executes it
Performs some HTTP requests
Unconventionial language used in binary resources: Russian
Uses Windows utilities for basic functionality
Network activity detected but not expressed in API logs
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

iplogger.org

www.bing.com

ocsp.comodoca.com

ocsp.usertrust.com

ocsp.sectigo.com

ocsp.pki.goog

How to determine Bulz.898352?


File Info:
crc32: 49A7F337md5: 89f3f25565f2eecec130330c5c1f220ename: 89F3F25565F2EECEC130330C5C1F220E.mlwsha1: 2a60fe08508ddfa18d6b3576bba9d25071efa8b3sha256: 4f43a40d9033d2b78aff365c63ed6af1dcf2a5b94959e0f66d4c05107840bbfdsha512: 714bdf5b5494a78330d80e5c58059c860db85ae0545af238942fc3954a15866788331765503f22b9bb3f37c18dbfbffdd44de80cb5a322e682ec4f153288bbf6ssdeep: 12288:pANwRo+mv8QD4+0V16cq8vKmTzCb+qNrTwBzPvq/utEarxhHxKQdRgylnONISSK1:pAT8QE+kb9TzA+qmfHU6gvNHS5R6Ntype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
LegalCopyright: JetCloud                                                                                            FileDescription: JetCleaner 6.18 Installation                                FileVersion: 6.18                Comments: CompanyName: JetCloud                                                    Translation: 0x0409 0x04e4

Bulz.898352 also known as:

ALYac	Gen:Variant.Bulz.898352
Cylance	Unsafe
BitDefender	Gen:Variant.Bulz.898352
Cybereason	malicious.8508dd
Cyren	W32/MSIL_Injector.LV.gen!Eldorado
APEX	Malicious
Kaspersky	UDS:DangerousObject.Multi.Generic
MicroWorld-eScan	Gen:Variant.Bulz.898352
Sophos	Generic ML PUA (PUA)
BitDefenderTheta	Gen:NN.ZemsilF.34236.gm1@aK9egLj
FireEye	Generic.mg.89f3f25565f2eece
Emsisoft	Gen:Variant.Bulz.898352 (B)
SentinelOne	Static AI – Malicious PE
eGambit	Unsafe.AI_Score_99%
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
GData	Gen:Variant.Bulz.898352
MAX	malware (ai score=83)
Ikarus	Trojan.Win32.Meredrop
MaxSecure	Trojan-Ransom.Win32.Crypmod.zfq