About “Fragtor.116325 (B)” infection

The Fragtor.116325 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Fragtor.116325 (B) virus can do?

• SetUnhandledExceptionFilter detected (possible anti-debug)
• Executed a command line with /C or /R argument to terminate command shell on completion which can be used to hide execution
• Dynamic (imported) function loading detected
• Network anomalies occured during the analysis.
• Reads data out of its own binary image
• A process created a hidden window
• Drops a binary and executes it
• Authenticode signature is invalid
• A ping command was executed with the -n argument possibly to delay analysis
• Uses Windows utilities for basic functionality
• Created a process from a suspicious location
• Uses suspicious command line tools or Windows utilities

How to determine Fragtor.116325 (B)?

File Info:
name: 3D8F34C83DA4F0F532B1.mlw
path: /opt/CAPEv2/storage/binaries/65033635c98287d91a7ed69454fe4eb52f734b3343fbc359ff2e5d3b8285d6d5
crc32: 9D9C03C0
md5: 3d8f34c83da4f0f532b17c3346f61b31
sha1: 96b93451ef2f3ec396fa67cb4af4aee06337e549
sha256: 65033635c98287d91a7ed69454fe4eb52f734b3343fbc359ff2e5d3b8285d6d5
sha512: de3df78c3f4a020a1e6babb25d2ebda42910c499058d3d1c67e016353e4088eac24906d4af378b662b406ef13315f625995a8845c2293c7ecf13b3bdf25df701
ssdeep: 384:WWtM3wUx9c09RXjXz7XjCWwqK8Wzz8WW5bIwHoq1IbVQ5USphqSBu9vvgacb:9tMDb79xjXvKBBW5boWIbWTPhY3cb
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T1FCC28D4BF6B18C61CE9963B41073497CE7BFFA741E62E9834B60F93509D4010F92918B
sha3_384: 5ef5302097ecea664c52e8d312e8821cbcc97c9a83656e56747ff3102045f98e52e000da80a693cd9c29069d99a3b2cf
ep_bytes: e8b1020000e974feffff558becff7508
timestamp: 2020-12-13 23:46:04

Version Info:
0: [No Data]

Fragtor.116325 (B) also known as:

How to remove Fragtor.116325 (B)?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.