About "Application.Graftor.714553" infection

The Application.Graftor.714553 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Application.Graftor.714553 virus can do?

Executable code extraction
Attempts to connect to a dead IP:Port (1 unique times)
Creates RWX memory
Reads data out of its own binary image
Performs some HTTP requests
Unconventionial language used in binary resources: Chinese (Simplified)
The binary likely contains encrypted or compressed data.
The executable is compressed using UPX
Tries to unhook or modify Windows functions monitored by Cuckoo

Related domains:

z.whorecord.xyz

a.tomx.xyz

www.x5cai.cn

How to determine Application.Graftor.714553?


File Info:
crc32: C66B286D
md5: 2fad7eb6af061b04a6400aa5974e782a
name: _____________________________________.exe
sha1: f040f6d6978b1f7e2172a02bdd6b100b70aa205c
sha256: 834b0621e2d9fae59423b130aff8944ccc6efa94b99c6ee26ee169a5fa945aa7
sha512: 0e72da2939de5542bdb0e07d97ae7f927d85649e19c45e6779c21c65c3341538d89d0685523b912a9c14173f1d5a4c7080643df5e4c7dadcc26d19ee77831e75
ssdeep: 12288:8sIEPtZzXIDNU7Ntfu4KFin+TLNaR5gyOEtO1R5vySoSw/TTmr:cDpFx3NaR5gyk13KBbTmr
type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

Version Info:
0: [No Data]

Application.Graftor.714553 also known as:

Bkav	W32.AIDetectVM.malware1
MicroWorld-eScan	Gen:Variant.Application.Graftor.714553
FireEye	Generic.mg.2fad7eb6af061b04
Cylance	Unsafe
BitDefender	Gen:Variant.Application.Graftor.714553
Cybereason	malicious.6af061
Invincea	heuristic
BitDefenderTheta	Gen:NN.ZexaF.34132.KmGfaq8d6Qhb
ESET-NOD32	a variant of Win32/Packed.FlyStudio.AA potentially unwanted
ClamAV	Win.Malware.Zusy-6840460-0
Ad-Aware	Gen:Variant.Application.Graftor.714553
SentinelOne	DFI – Malicious PE
Emsisoft	Gen:Variant.Application.Graftor.714553 (B)
APEX	Malicious
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/QQWare.A!tr
Antiy-AVL	GrayWare/Win32.FlyStudio.a
Endgame	malicious (high confidence)
Arcabit	Trojan.Application.Graftor.DAE739
TotalDefense	Win32/Oflwr.A!crypt
MAX	malware (ai score=73)
VBA32	BScope.Trojan.Downloader
Rising	Malware.Heuristic!ET#75% (RDMK:cmRtazqQYWkikMuMHmf9UEow5jMH)
eGambit	Unsafe.AI_Score_100%
GData	Gen:Variant.Application.Graftor.714553
CrowdStrike	win/malicious_confidence_80% (D)

How to remove Application.Graftor.714553?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About “Application.Graftor.714553” infection