Categories: Malware

About “Fragtor.117663” infection

The Fragtor.117663 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Fragtor.117663 virus can do?

Executed a command line with /C or /R argument to terminate command shell on completion which can be used to hide execution
Reads data out of its own binary image
Drops a binary and executes it
Authenticode signature is invalid
A ping command was executed with the -n argument possibly to delay analysis
Uses Windows utilities for basic functionality
Deletes executed files from disk
Uses suspicious command line tools or Windows utilities

How to determine Fragtor.117663?


File Info:
name: 5D33C5E090888B586F6B.mlwpath: /opt/CAPEv2/storage/binaries/0f9a21f220066e6bce65438bd5142f8fe691f4506b3ced704fbf3dd4991b5b94crc32: E4A855EAmd5: 5d33c5e090888b586f6b08f5ec711fe7sha1: 264b21aa30c7d51e9b45bbe000a298a2c992889esha256: 0f9a21f220066e6bce65438bd5142f8fe691f4506b3ced704fbf3dd4991b5b94sha512: 2d2c4c8350db7aef5c3492b710e67e4c777748304df923bb65da448771a76160bf3d79a48c7b521c5e509b987bccac086a6d237ce0e4a5c63ddf25c0e5a7be97ssdeep: 768:iYBAbp449xjXvKBBW5bgxEwE8QjKS+qAoAKJH9R:ijDjSBBWqlO5/lRtype: PE32 executable (console) Intel 80386, for MS Windowstlsh: T14BC29F87BA41CC71EB5001B1B9716EBCC2FF7AD07FE641529B65DE7908FA011D81A28Asha3_384: 6cb56b5fd1d70aa4f598616f88c564362e868686db50d21ac4079e414bf4f74472f939d8f48ce76e1c2cabc538f76d12ep_bytes: e8b1020000e974feffff558becff7508timestamp: 2020-12-13 23:46:04
Version Info:
0: [No Data]

Fragtor.117663 also known as:

Bkav	W32.AIDetect.malware2
MicroWorld-eScan	Gen:Variant.Fragtor.117663
ClamAV	Win.Malware.Fugrafa-9950512-0
CAT-QuickHeal	Trojan.Stealer.S28360516
McAfee	GenericRXNV-VM!5D33C5E09088
Cylance	Unsafe
VIPRE	Gen:Variant.Fragtor.117663
Sangfor	Suspicious.Win32.Save.a
K7AntiVirus	Password-Stealer ( 005937271 )
K7GW	Password-Stealer ( 005937271 )
Cybereason	malicious.090888
Cyren	W32/Agent.ENB.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/PSW.Agent.OOO
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	HEUR:Trojan.Win32.SelfDel.pef
BitDefender	Gen:Variant.Fragtor.117663
NANO-Antivirus	Trojan.Win32.SelfDel.jpepdv
SUPERAntiSpyware	Trojan.Agent/Gen-Stealer
Avast	Win32:Malware-gen
Tencent	Trojan.Win32.Selfdel.xb
Ad-Aware	Gen:Variant.Fragtor.117663
TACHYON	Trojan/W32.Fugrafa.26112
Emsisoft	Gen:Variant.Fragtor.117663 (B)
DrWeb	Trojan.MulDrop20.10627
Zillya	Trojan.SelfDel.Win32.65008
McAfee-GW-Edition	GenericRXNV-VM!5D33C5E09088
FireEye	Generic.mg.5d33c5e090888b58
Sophos	Troj/PWS-CMJ
Ikarus	Trojan.DelFiles
GData	Gen:Variant.Fragtor.117663
Jiangmin	Trojan.Selfdel.rft
Avira	HEUR/AGEN.1234650
Antiy-AVL	GrayWare/Win32.SelfDef.a
Arcabit	Trojan.Fragtor.D1CB9F
Microsoft	Trojan:Win32/Fragtor.EL!MTB
Google	Detected
AhnLab-V3	Malware/Win.Reputation.R496203
Acronis	suspicious
ALYac	Gen:Variant.Fragtor.117663
MAX	malware (ai score=85)
VBA32	BScope.Trojan.Occamy
Malwarebytes	Malware.AI.3582201929
Rising	Stealer.Agent!1.DE3E (CLASSIC)
SentinelOne	Static AI – Suspicious PE
MaxSecure	Trojan.Malware.121218.susgen
Fortinet	W32/SelfDef.26C0!tr
AVG	Win32:Malware-gen
Panda	Trj/Genetic.gen
CrowdStrike	win/malicious_confidence_100% (D)