Categories: Malware

What is “Fragtor.135092”?

The Fragtor.135092 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Fragtor.135092 virus can do?

Yara rule detections observed from a process memory dump/dropped files/CAPE
Unconventionial language used in binary resources: Chinese (Simplified)
The binary contains an unknown PE section name indicative of packing
The binary likely contains encrypted or compressed data.
The executable is likely packed with VMProtect
Authenticode signature is invalid

How to determine Fragtor.135092?


File Info:
name: FD0FDECD81D84EACF768.mlwpath: /opt/CAPEv2/storage/binaries/01bfd338d1daa1db00f7899254baaef4f4f838e8cd6f9c41e22ced6581d3e05fcrc32: 05648D6Fmd5: fd0fdecd81d84eacf768557776870f98sha1: def01d484366323df986c93c7877089a5a136523sha256: 01bfd338d1daa1db00f7899254baaef4f4f838e8cd6f9c41e22ced6581d3e05fsha512: da295b9be3c6435dc217d37a21f3f90615f52b9a3de9b11a4a5b5f608e899aa6ec5158f689d82a37b81ccc6d35677f23d2cf6fdf8a29c3d79504c3fd1d592a89ssdeep: 49152:wewPNkdRdGGgAlN7DuhV+JCqCzEwZsRqy7gq+z0rLt2Eo:wefXdtL7jMqCA17gfqkbtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1FFD533CB7E256B78D6D248344B1F3CD89C8F2DB29FD2896B8AD27351037FA4B1109891sha3_384: 46e16eb04019d77ea7c6f0c34d2268ed518d17c9d8a1620f0433d8dd0b7efed5ff9870b42faa1a9d8e088772be0f5615ep_bytes: 6875f9e4ccc704245ad916eee948ee1btimestamp: 2022-08-11 19:26:49
Version Info:
0: [No Data]

Fragtor.135092 also known as:

MicroWorld-eScan	Gen:Variant.Fragtor.135092
FireEye	Generic.mg.fd0fdecd81d84eac
McAfee	GenericRXAA-AA!FD0FDECD81D8
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Adware ( 004b942f1 )
K7GW	Adware ( 004b942f1 )
Cybereason	malicious.843663
Cyren	W32/FlyStudio.AC.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
APEX	Malicious
Cynet	Malicious (score: 100)
BitDefender	Gen:Variant.Fragtor.135092
Avast	Win32:Malware-gen
Ad-Aware	Gen:Variant.Fragtor.135092
TACHYON	Trojan-Downloader/W32.Upatre.2846720
Sophos	Generic ML PUA (PUA)
Comodo	TrojWare.Win32.Trojan.XPack.~gen1@1rwlif
DrWeb	Trojan.Inject4.40175
VIPRE	Gen:Variant.Fragtor.135092
McAfee-GW-Edition	BehavesLike.Win32.Generic.vc
Trapmine	malicious.high.ml.score
Emsisoft	Adware.Generic (A)
SentinelOne	Static AI – Malicious PE
Jiangmin	TrojanDownloader.Upatre.anwu
Antiy-AVL	Trojan/Generic.ASMalwS.3CF7
Microsoft	Trojan:Win32/Wacatac.B!ml
GData	Win32.Trojan.PSE.1GZK45
Google	Detected
AhnLab-V3	Trojan/Win.Malware-gen.R510881
BitDefenderTheta	Gen:NN.ZexaF.34606.TAW@aOuMu5kb
ALYac	Gen:Variant.Fragtor.135092
MAX	malware (ai score=85)
Malwarebytes	Trojan.MalPack
Rising	Downloader.Upatre!8.B5 (TFE:4:mafX1TURbeO)
MaxSecure	Trojan.Malware.300983.susgen
AVG	Win32:Malware-gen
CrowdStrike	win/malicious_confidence_70% (D)