Malware

Fragtor.15070 (B) (file analysis)

Malware Removal

The Fragtor.15070 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Fragtor.15070 (B) virus can do?

  • Executable code extraction
  • Creates RWX memory
  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • Deletes its original binary from disk
  • Creates a copy of itself

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Fragtor.15070 (B)?


File Info:

crc32: F879B524
md5: 5c967b74ee91953ba2c6a58fbb820aca
name: 5C967B74EE91953BA2C6A58FBB820ACA.mlw
sha1: dfcf09da580b4fdcf9c9756db2baa2f7f5416057
sha256: c49231c821ae9e1891deabfef8a65f29a93fd92d0c64d594e42a97a60edb268d
sha512: 6ec8a3ce8f9886a08b24c8b1a0e61d040cb673cb64e49997ad710028dfb125d8344531d051fc05d61d3a47d7e3b7574ee8451c39da4bee38acdebafc8c667557
ssdeep: 12288:hG3JiXcKg1FR99rHB5IurOxFgP6dMMFp8XlfS1oKSz9xq17O2:hsKg3R9ZBzP2MSpUvNhxq1
type: PE32 executable (console) Intel 80386 (stripped to external PDB), for MS Windows, UPX compressed

Version Info:

0: [No Data]

Fragtor.15070 (B) also known as:

K7AntiVirusTrojan ( 0057ffc71 )
Elasticmalicious (high confidence)
DrWebTrojan.Packed2.43250
CynetMalicious (score: 100)
ALYacGen:Variant.Fragtor.15070
CylanceUnsafe
SangforSuspicious.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaMalware:Win32/km_280b22.None
K7GWTrojan ( 005762bf1 )
Cybereasonmalicious.a580b4
CyrenW32/CoinMiner.CQ.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Kryptik.HITO
APEXMalicious
AvastWin32:CoinminerX-gen [Trj]
Kasperskynot-a-virus:HEUR:RiskTool.Win32.BitCoinMiner.vho
BitDefenderGen:Variant.Fragtor.15070
MicroWorld-eScanGen:Variant.Fragtor.15070
TencentTrojan.Win32.Coinminer.yi
Ad-AwareGen:Variant.Fragtor.15070
SophosMal/HckPk-A
ComodoPacked.Win32.MUPX.Gen@24tbus
BitDefenderThetaGen:NN.ZexaF.34266.XmW@auM2Imh
TrendMicroTROJ_GEN.R002C0DJ321
McAfee-GW-EditionBehavesLike.Win32.Generic.bc
FireEyeGen:Variant.Fragtor.15070
EmsisoftGen:Variant.Fragtor.15070 (B)
SentinelOneStatic AI – Malicious PE
JiangminRiskTool.BitCoinMiner.wne
AviraTR/Crypt.ULPM.Gen
Antiy-AVLTrojan/Generic.ASBOL.C68C
MicrosoftTrojan:Win32/Injector.RAQ!MTB
GDataGen:Variant.Fragtor.15070
AhnLab-V3Malware/Gen.RL_Reputation.R363983
McAfeeGenericRXAA-AA!5C967B74EE91
MAXmalware (ai score=86)
VBA32Trojan.Packed
MalwarebytesTrojan.Crypt.UPX
PandaTrj/Genetic.gen
TrendMicro-HouseCallTROJ_GEN.R002C0DJ321
RisingTrojan.Injector!1.C865 (CLASSIC)
IkarusTrojan.Win32.Injector
MaxSecureTrojan.Malware.74654884.susgen
FortinetW32/Kryptik.EAHK!tr
AVGWin32:CoinminerX-gen [Trj]
Paloaltogeneric.ml

How to remove Fragtor.15070 (B)?

Fragtor.15070 (B) removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment