About “Fragtor.187273” infection

The Fragtor.187273 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Fragtor.187273 virus can do?

• Executed a command line with /C or /R argument to terminate command shell on completion which can be used to hide execution
• Reads data out of its own binary image
• Drops a binary and executes it
• Authenticode signature is invalid
• A ping command was executed with the -n argument possibly to delay analysis
• Uses Windows utilities for basic functionality
• Deletes executed files from disk
• Uses suspicious command line tools or Windows utilities

How to determine Fragtor.187273?

File Info:
name: CB0B5FE5FB5B19A519ED.mlw
path: /opt/CAPEv2/storage/binaries/1d7ee4a6f36dcff39f25f7dd033528dee5bfb475add8687c655580c31d58de1f
crc32: 9E982695
md5: cb0b5fe5fb5b19a519ed4c95324bcf56
sha1: 400a2764d0680dc5f6146dfdc3425869d7bbd1f9
sha256: 1d7ee4a6f36dcff39f25f7dd033528dee5bfb475add8687c655580c31d58de1f
sha512: 5e62ceb0a4b5aefb72228885b29b59fd2a337cc0f166ca4b2aaf615b58414b5e3fec96bb3a3d5529777716d02d35981e088fe0ab5b55858831414e98298206b2
ssdeep: 768:0kyKvBAkbVKU9xjXvKBBW5bD1pwfR4xcPQUjixZrv:0kfKUDjSBBWHpwp4xcPd2v
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T1B8C28C43F6E4B862CFC046F127F695B4C2BF3C305EA195665BA3ED5A14A8840EB0974F
sha3_384: bb3d358387ad34c9e01939ebcef5843396f8f696ec5fe9211dd2a1471bf8a83b03316a1e75c9d44441908b0c8b1bd065
ep_bytes: e8b1020000e974feffff558becff7508
timestamp: 2020-12-13 23:46:04

Version Info:
0: [No Data]

Fragtor.187273 also known as:

How to remove Fragtor.187273?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.