About “Fragtor.24820” infection

The Fragtor.24820 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Fragtor.24820 virus can do?

Presents an Authenticode digital signature
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Fragtor.24820?


File Info:
name: 56C1037A04C6E7F6382B.mlw
path: /opt/CAPEv2/storage/binaries/265fab53d3121b842ec00b93e2601be4e05c4f71d8320b71ea8b5c9f29572699
crc32: 09F1B196
md5: 56c1037a04c6e7f6382b27ee31b7abd3
sha1: cf85e75cc570704c69819efd2175f4da85b91b26
sha256: 265fab53d3121b842ec00b93e2601be4e05c4f71d8320b71ea8b5c9f29572699
sha512: 8197f4e0bee173c4c0b164e9e1390a8791d9827eca919cd4fe738a0a4f22818cb2273ff89c7075267cbce162e49b4ce95a5b8fc0400c16a0d8846fe813552f02
ssdeep: 49152:h6kenWOv9M4LfU3ITeq/hKPgssSt2gBBQCKMN7pXRKNnp3:hXy9Neq/hv7Stt9Nng
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T1C3E54A12A7F58465F1B72A709DB5A2305A367D611E36C54FB298331E4D33AC0AE39B33
sha3_384: 327c8f8edeffdf018fe33a530d0b77a7693f5369ac1864d231de06ff2999a19d699f3336373d34167fd857e2f154984b
ep_bytes: e8cf020000e974feffff558bec8b4508
timestamp: 2020-12-09 13:07:55

Version Info:
CompanyName: Oracle Corporation
FileDescription: Java(TM) Platform SE binary
FileVersion: 8.0.2810.9
Full Version: 1.8.0_281-b09
InternalName: servertool
LegalCopyright: Copyright © 2020
OriginalFilename: servertool.exe
ProductName: Java(TM) Platform SE 8
ProductVersion: 8.0.2810.9
Translation: 0x0000 0x04b0

Fragtor.24820 also known as:

Bkav	W32.AIDetect.malware1
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Fragtor.24820
FireEye	Gen:Variant.Fragtor.24820
ALYac	Gen:Variant.Fragtor.24820
Sangfor	Trojan.Win32.Save.a
Cyren	W32/Agent.DNK.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
TrendMicro-HouseCall	TROJ_GEN.R03BH09L321
ClamAV	Win.Dropper.Ausiv-9876732-0
BitDefender	Gen:Variant.Fragtor.24820
Ad-Aware	Gen:Variant.Fragtor.24820
Sophos	Generic ML PUA (PUA)
McAfee-GW-Edition	BehavesLike.Win32.CoinMiner.wh
Emsisoft	Gen:Variant.Fragtor.24820 (B)
SentinelOne	Static AI – Malicious PE
GData	Win32.Trojan.PSE.TLQCHU
Jiangmin	Packed.Krap.gvxj
Arcabit	Trojan.Fragtor.D60F4
Microsoft	Trojan:Win32/Wacatac.B!ml
Cynet	Malicious (score: 100)
McAfee	Artemis!56C1037A04C6
MAX	malware (ai score=80)
Ikarus	Trojan.Agent
Fortinet	W32/Agent.A110!tr
MaxSecure	Trojan.Malware.121218.susgen

How to remove Fragtor.24820?

Fragtor.24820 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X