Fragtor.503155 (file analysis)

The Fragtor.503155 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Fragtor.503155 virus can do?

Sample contains Overlay data
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine Fragtor.503155?


File Info:
name: 237007A9DDCAB1E5FEEE.mlw
path: /opt/CAPEv2/storage/binaries/637645a86d098082d34a6f801de25bb1475d45a5754d519df61454e1596383b2
crc32: 5F85A122
md5: 237007a9ddcab1e5feeeabdbd61c449a
sha1: 8ef6c72550c798a727d84bc0d06b397bfa4c1c3b
sha256: 637645a86d098082d34a6f801de25bb1475d45a5754d519df61454e1596383b2
sha512: 5a2e055c772cedf94088bbe61d3cac6036ea3007245a36c448ccfa99d42f0023562269647d4896b3f88939fc8b53cb7766c5a7491e85fc09ef7e229e9f7a767b
ssdeep: 768:qE8oXxHSFZ2cDPP3lLuzZPKqoWSYne5R5:zRXd+PDPP3lLuBZoYnA
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
tlsh: T134E2D8597E444CEBE9511B3C80E7D7762A7CF440CA234B62F651EB318B237A5218A26F
sha3_384: 2f55edf7ce9039a287bb3204170faa23a9d751a19e012fbb60180f6cdf7d45a591aaec35e049c5424436b1b221e02544
ep_bytes: 57565383ec108b5c24248b7424208b7c
timestamp: 2024-02-09 00:56:49

Version Info:
0: [No Data]

Fragtor.503155 also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Fragtor.503155
FireEye	Gen:Variant.Fragtor.503155
Skyhigh	BehavesLike.Win32.Injector.nm
McAfee	GenericRXWN-OT!237007A9DDCA
Cylance	unsafe
Sangfor	Suspicious.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (W)
Arcabit	Trojan.Fragtor.D7AD73
BitDefenderTheta	Gen:NN.ZedlaF.36744.c46@amXwwjb
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Agent_AGen.DDS
Cynet	Malicious (score: 99)
BitDefender	Gen:Variant.Fragtor.503155
Avast	Win32:TrojanX-gen [Trj]
Emsisoft	Gen:Variant.Fragtor.503155 (B)
F-Secure	Trojan.TR/Agent_AGen.zonwn
VIPRE	Gen:Variant.Fragtor.503155
Google	Detected
Avira	TR/Agent_AGen.zonwn
Antiy-AVL	Trojan/Win32.Wacatac
Microsoft	Trojan:Win32/Wacatac.B!ml
GData	Gen:Variant.Fragtor.503155
AhnLab-V3	Trojan/Win.Generic.R634543
MAX	malware (ai score=84)
Panda	Trj/Chgt.AD
Rising	Trojan.Agent!8.B1E (CLOUD)
Ikarus	Trojan.Win32.Agent
Fortinet	W32/Agent.DDP!tr
AVG	Win32:TrojanX-gen [Trj]
DeepInstinct	MALICIOUS

How to remove Fragtor.503155?

Fragtor.503155 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X