Fragtor.22666 information

Malware Removal

The Fragtor.22666 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware - Review 2020

GridinSoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend to use GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the TRIAL period.
6-day free trial available.

What Fragtor.22666 virus can do?

  • Executable code extraction
  • Injection (inter-process)
  • Injection (Process Hollowing)
  • Creates RWX memory
  • A process attempted to delay the analysis task.
  • A named pipe was used for inter-process communication
  • A process created a hidden window
  • Drops a binary and executes it
  • Performs some HTTP requests
  • Unconventionial language used in binary resources: Tswana
  • The binary likely contains encrypted or compressed data.
  • Executed a process and injected code into it, probably while unpacking
  • Network activity contains more than one unique useragent.
  • Installs itself for autorun at Windows startup
  • Writes a potential ransom message to disk
  • Attempts to modify proxy settings
  • Creates a copy of itself
  • Anomalous binary characteristics
  • Uses suspicious command line tools or Windows utilities

Related domains:

z.whorecord.xyz
api.2ip.ua
a.tomx.xyz
securebiz.org
tbpws.top
mas.to

How to determine Fragtor.22666?


File Info:

crc32: 5F643749
md5: ccb6247d4990ce30d67717282a5945cb
name: CCB6247D4990CE30D67717282A5945CB.mlw
sha1: f7a35e88649b3e6fa2fca7574a82e7f634e13510
sha256: 2078b64d057d683b0ad4aef79ee66f181901bc54331920426b3f724b8c11aa11
sha512: 89d669ac905a8f378abfb10e5a55dbe9c1a37ad54244c8bb8df420d80fc2430a9a7417bf46a85a6b142df36c1fc2afccb93df9d8881a500f40738100fdf1531d
ssdeep: 12288:a4nEN8Ap/LyeOguD/94RQVHD8BeDkpAg1ErSa7uNntDeUqMrAX0T3k7qi7w:lENHpTiSMHDweiA0ErT7uBrAXw27w
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

InternalName: sojbmoemonu.uhe
ProductVersion: 8.19.590.38
Copyright: Copyrighz (C) 2021, fudkagata
Translation: 0x0129 0x0171

Fragtor.22666 also known as:

BkavW32.AIDetect.malware2
Elasticmalicious (high confidence)
CynetMalicious (score: 100)
CAT-QuickHealRansom.Stop.P5
ALYacGen:Variant.Fragtor.22666
CylanceUnsafe
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (W)
K7GWHacktool ( 700007861 )
Cybereasonmalicious.8649b3
CyrenW32/Kryptik.EWJ.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Kryptik.HMMQ
APEXMalicious
AvastWin32:DropperX-gen [Drp]
ClamAVWin.Packed.Generic-9893288-0
KasperskyHEUR:Trojan-Ransom.Win32.Stop.gen
BitDefenderGen:Variant.Fragtor.22666
MicroWorld-eScanGen:Variant.Fragtor.22666
Ad-AwareGen:Variant.Fragtor.22666
SophosML/PE-A
BitDefenderThetaGen:NN.ZexaF.34142.Sq0@ayUf9vnO
McAfee-GW-EditionBehavesLike.Win32.Generic.bc
FireEyeGeneric.mg.ccb6247d4990ce30
EmsisoftTrojan.Crypt (A)
SentinelOneStatic AI – Malicious PE
JiangminTrojanSpy.Stealer.fim
AviraTR/AD.InstaBot.nylnu
MicrosoftTrojan:Win32/Azorult.RW!MTB
GDataGen:Variant.Fragtor.22666
AhnLab-V3CoinMiner/Win.Glupteba.R441535
Acronissuspicious
McAfeePacked-GDT!CCB6247D4990
MAXmalware (ai score=87)
VBA32BScope.Trojan.Eb
MalwarebytesTrojan.Downloader
PandaTrj/Genetic.gen
RisingTrojan.Kryptik!1.D977 (CLASSIC)
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/GenKryptik.FKSO!tr
AVGWin32:DropperX-gen [Drp]

How to remove Fragtor.22666?

Fragtor.22666 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

Leave a Comment