Malware

About “Fragtor.117663” infection

Malware Removal

The Fragtor.117663 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Fragtor.117663 virus can do?

  • Executed a command line with /C or /R argument to terminate command shell on completion which can be used to hide execution
  • Reads data out of its own binary image
  • Drops a binary and executes it
  • Authenticode signature is invalid
  • A ping command was executed with the -n argument possibly to delay analysis
  • Uses Windows utilities for basic functionality
  • Deletes executed files from disk
  • Uses suspicious command line tools or Windows utilities

How to determine Fragtor.117663?


File Info:

name: 5D33C5E090888B586F6B.mlw
path: /opt/CAPEv2/storage/binaries/0f9a21f220066e6bce65438bd5142f8fe691f4506b3ced704fbf3dd4991b5b94
crc32: E4A855EA
md5: 5d33c5e090888b586f6b08f5ec711fe7
sha1: 264b21aa30c7d51e9b45bbe000a298a2c992889e
sha256: 0f9a21f220066e6bce65438bd5142f8fe691f4506b3ced704fbf3dd4991b5b94
sha512: 2d2c4c8350db7aef5c3492b710e67e4c777748304df923bb65da448771a76160bf3d79a48c7b521c5e509b987bccac086a6d237ce0e4a5c63ddf25c0e5a7be97
ssdeep: 768:iYBAbp449xjXvKBBW5bgxEwE8QjKS+qAoAKJH9R:ijDjSBBWqlO5/lR
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T14BC29F87BA41CC71EB5001B1B9716EBCC2FF7AD07FE641529B65DE7908FA011D81A28A
sha3_384: 6cb56b5fd1d70aa4f598616f88c564362e868686db50d21ac4079e414bf4f74472f939d8f48ce76e1c2cabc538f76d12
ep_bytes: e8b1020000e974feffff558becff7508
timestamp: 2020-12-13 23:46:04

Version Info:

0: [No Data]

Fragtor.117663 also known as:

BkavW32.AIDetect.malware2
MicroWorld-eScanGen:Variant.Fragtor.117663
ClamAVWin.Malware.Fugrafa-9950512-0
CAT-QuickHealTrojan.Stealer.S28360516
McAfeeGenericRXNV-VM!5D33C5E09088
CylanceUnsafe
VIPREGen:Variant.Fragtor.117663
SangforSuspicious.Win32.Save.a
K7AntiVirusPassword-Stealer ( 005937271 )
K7GWPassword-Stealer ( 005937271 )
Cybereasonmalicious.090888
CyrenW32/Agent.ENB.gen!Eldorado
SymantecML.Attribute.HighConfidence
Elasticmalicious (high confidence)
ESET-NOD32a variant of Win32/PSW.Agent.OOO
APEXMalicious
CynetMalicious (score: 100)
KasperskyHEUR:Trojan.Win32.SelfDel.pef
BitDefenderGen:Variant.Fragtor.117663
NANO-AntivirusTrojan.Win32.SelfDel.jpepdv
SUPERAntiSpywareTrojan.Agent/Gen-Stealer
AvastWin32:Malware-gen
TencentTrojan.Win32.Selfdel.xb
Ad-AwareGen:Variant.Fragtor.117663
TACHYONTrojan/W32.Fugrafa.26112
EmsisoftGen:Variant.Fragtor.117663 (B)
DrWebTrojan.MulDrop20.10627
ZillyaTrojan.SelfDel.Win32.65008
McAfee-GW-EditionGenericRXNV-VM!5D33C5E09088
FireEyeGeneric.mg.5d33c5e090888b58
SophosTroj/PWS-CMJ
IkarusTrojan.DelFiles
GDataGen:Variant.Fragtor.117663
JiangminTrojan.Selfdel.rft
AviraHEUR/AGEN.1234650
Antiy-AVLGrayWare/Win32.SelfDef.a
ArcabitTrojan.Fragtor.D1CB9F
MicrosoftTrojan:Win32/Fragtor.EL!MTB
GoogleDetected
AhnLab-V3Malware/Win.Reputation.R496203
Acronissuspicious
ALYacGen:Variant.Fragtor.117663
MAXmalware (ai score=85)
VBA32BScope.Trojan.Occamy
MalwarebytesMalware.AI.3582201929
RisingStealer.Agent!1.DE3E (CLASSIC)
SentinelOneStatic AI – Suspicious PE
MaxSecureTrojan.Malware.121218.susgen
FortinetW32/SelfDef.26C0!tr
AVGWin32:Malware-gen
PandaTrj/Genetic.gen
CrowdStrikewin/malicious_confidence_100% (D)

How to remove Fragtor.117663?

Fragtor.117663 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment