Malware

Fragtor.25639 (B) malicious file

Malware Removal

The Fragtor.25639 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Fragtor.25639 (B) virus can do?

  • Executable code extraction
  • Injection (inter-process)
  • Injection (Process Hollowing)
  • Attempts to connect to a dead IP:Port (1 unique times)
  • Creates RWX memory
  • A process created a hidden window
  • Unconventionial language used in binary resources: Arabic (Libya)
  • The binary likely contains encrypted or compressed data.
  • Executed a process and injected code into it, probably while unpacking
  • Anomalous binary characteristics

Related domains:

t.me

How to determine Fragtor.25639 (B)?


File Info:

crc32: 542FD0CB
md5: facbbe7161be596196bbed8f85dd386a
name: FACBBE7161BE596196BBED8F85DD386A.mlw
sha1: a44807108a5825a3b69b9ecdbf8880bbb9425100
sha256: 68c8034c163f04c237fae46f45b55ec1799f6305aa8bf3b2cc477a403c44fc17
sha512: d4bcdb099d5a2f77913ffd09a476b9d69d7c39909468c703ff6aa4076c707dd079e4351f89d9821b76dadc2428a0966f486c74c5adbfa1e6217a3e6517decf40
ssdeep: 12288:JVLdvlM//+g4MJsFAzoNcAs+eoGB1hqd:JVLdvly4EzoNcA1eDpq
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

InternalName: sajbmoimizu.ise
ProductVersion: 8.7.59.3
Copyright: Copyrighz (C) 2021, fudkagat
Translation: 0x0127 0x00a9

Fragtor.25639 (B) also known as:

BkavW32.AIDetect.malware1
Elasticmalicious (high confidence)
CynetMalicious (score: 100)
CylanceUnsafe
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (D)
K7GWHacktool ( 700007861 )
Cybereasonmalicious.08a582
CyrenW32/Kryptik.EWJ.gen!Eldorado
SymantecML.Attribute.HighConfidence
APEXMalicious
AvastFileRepMalware
KasperskyUDS:Trojan-PSW.Win32.Racealer.gen
BitDefenderGen:Variant.Fragtor.25639
MicroWorld-eScanGen:Variant.Fragtor.25639
SophosMal/Generic-R
BitDefenderThetaGen:NN.ZexaF.34170.Bq0@a8rooCdO
McAfee-GW-EditionBehavesLike.Win32.Upatre.gc
FireEyeGeneric.mg.facbbe7161be5961
EmsisoftGen:Variant.Fragtor.25639 (B)
SentinelOneStatic AI – Malicious PE
MicrosoftTrojan:Win32/Azorult.FW!MTB
GDataGen:Variant.Fragtor.25639
Acronissuspicious
McAfeePacked-GDT!FACBBE7161BE
MAXmalware (ai score=88)
MalwarebytesTrojan.MalPack.GS
RisingTrojan.Generic@ML.84 (RDML:Fo6sM2tGxI/gGODhQxHbFg)
AVGFileRepMalware

How to remove Fragtor.25639 (B)?

Fragtor.25639 (B) removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment