Malware

Fragtor.31535 (B) malicious file

Malware Removal

The Fragtor.31535 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Fragtor.31535 (B) virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • SetUnhandledExceptionFilter detected (possible anti-debug)
  • Creates RWX memory
  • Dynamic (imported) function loading detected
  • CAPE extracted potentially suspicious content
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • Authenticode signature is invalid
  • Deletes its original binary from disk
  • Created a process from a suspicious location
  • Creates a copy of itself

How to determine Fragtor.31535 (B)?


File Info:

name: 1C1D8F72564A2670F4D8.mlw
path: /opt/CAPEv2/storage/binaries/e577940b3009311596286d58ff80606365019fcd7b640d758a8903f9f603ea8e
crc32: F68A8FBB
md5: 1c1d8f72564a2670f4d896ebe7508e13
sha1: 42efc862d51286c85018b0df3ee9beb89c5a3e61
sha256: e577940b3009311596286d58ff80606365019fcd7b640d758a8903f9f603ea8e
sha512: 5bb3f1634dd4b8b4c3418703e5518d09efb02e269b33cc51efd92fc30847dacc01af40e63ccb9f4d6f760451f847ad18792ee2b96fd9ae4683dce99e1e6aae84
ssdeep: 24576:J2aOMdCLFzpPE+JOQHz8JzQMo4sQSh2GWtnwI:0Ci1pxzKroTQXJtd
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T176052339ECAA7D02C33856BBA0B9D186CDD928F001F6D6216D7E367FD45B435C896E20
sha3_384: 962f6cdef986192e2da55085d13886342a39099ee83dff1560b476dbd08e44c432d9ee9a1987cd3f0f356b98a1adbd05
ep_bytes: bf00000000504e5b89f281c201000000
timestamp: 1970-01-01 00:00:00

Version Info:

0: [No Data]

Fragtor.31535 (B) also known as:

BkavW32.AIDetect.malware2
LionicRiskware.Win32.BitCoinMiner.1!c
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.Fragtor.31535
FireEyeGeneric.mg.1c1d8f72564a2670
CAT-QuickHealTrojan.Fragtor
McAfeeGenericRXAA-FA!1C1D8F72564A
CylanceUnsafe
K7AntiVirusTrojan ( 0057ffc71 )
AlibabaMalware:Win32/km_280b22.None
K7GWTrojan ( 005762bf1 )
CrowdStrikewin/malicious_confidence_90% (W)
BitDefenderThetaGen:NN.ZexaF.34062.XmW@au9Or3l
CyrenW32/CoinMiner.CQ.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Injector.DZQA
APEXMalicious
Paloaltogeneric.ml
Kasperskynot-a-virus:HEUR:RiskTool.Win32.BitCoinMiner.vho
BitDefenderGen:Variant.Fragtor.31535
AvastWin32:CoinminerX-gen [Trj]
TencentTrojan.Win32.Coinminer.yi
Ad-AwareGen:Variant.Fragtor.31535
ComodoPacked.Win32.MUPX.Gen@24tbus
DrWebTrojan.Packed2.43250
TrendMicroTROJ_GEN.R002C0DL621
McAfee-GW-EditionBehavesLike.Win32.Generic.bc
EmsisoftGen:Variant.Fragtor.31535 (B)
IkarusTrojan.Win32.Injector
GDataGen:Variant.Fragtor.31535
AviraTR/Crypt.ULPM.Gen
Antiy-AVLTrojan/Generic.ASBOL.C689
ArcabitTrojan.Fragtor.D7B2F
MicrosoftTrojan:Win32/Injector.RAQ!MTB
CynetMalicious (score: 100)
AhnLab-V3Malware/Gen.RL_Reputation.R363983
ALYacGen:Variant.Fragtor.31535
MAXmalware (ai score=85)
VBA32Trojan.Packed
MalwarebytesTrojan.Crypt.UPX
TrendMicro-HouseCallTROJ_GEN.R002C0DL621
RisingTrojan.Kryptik!1.D12D (CLASSIC)
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Kryptik.EAHK!tr
AVGWin32:CoinminerX-gen [Trj]
Cybereasonmalicious.2d5128
PandaTrj/Genetic.gen

How to remove Fragtor.31535 (B)?

Fragtor.31535 (B) removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment