Fragtor.503155 (file analysis)

The Fragtor.503155 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Fragtor.503155 virus can do?

Sample contains Overlay data
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
Installs itself for autorun at Windows startup

How to determine Fragtor.503155?


File Info:
name: 9C607C5C51D63CE3E55B.mlw
path: /opt/CAPEv2/storage/binaries/cdb96652b8093c09806895813924a34ad25befa8b4705b4624b34eaaba188ab4
crc32: 6FF3C8B6
md5: 9c607c5c51d63ce3e55beb3b59e1455c
sha1: 9e0564aeef3ee2f9f0a961c301e054846869da08
sha256: cdb96652b8093c09806895813924a34ad25befa8b4705b4624b34eaaba188ab4
sha512: 1e636041d2c1fcc9111539520b0aa22b71b76f286deaf4b33c86d43be7c557c7009394127440827f534d3e86e988aed79078cb236b7394eb1629aa2a21a3eed9
ssdeep: 384:yjnRZs3B8H3zo+ZClGCmPeuaBU3losjuzZ6UwYRGZqY7PbSBGpl+EDctVtyRi:eZI0o+Z0CPP3lLuzZPKqwbnlbYtXyRi
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
tlsh: T111E2C759BE448CEBE960573980E7C7772E7CF190C6235B62F650B7309B237A1205B26E
sha3_384: 0251bbcee4158c55ecae84edf3502ea422e5525d9eee9908820902074d65f0e330974e33d58a3541fdc21d899bff32f0
ep_bytes: 57565383ec108b5c24248b7424208b7c
timestamp: 2024-02-09 16:55:16

Version Info:
0: [No Data]

Fragtor.503155 also known as:

Lionic	Trojan.Win32.Generic.4!c
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
FireEye	Gen:Variant.Fragtor.503155
Skyhigh	BehavesLike.Win32.Injector.nm
Sangfor	Suspicious.Win32.Save.a
BitDefenderTheta	Gen:NN.ZedlaF.36744.c46@a4DIsJn
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Agent_AGen.DDZ
BitDefender	Gen:Variant.Fragtor.503155
MicroWorld-eScan	Gen:Variant.Fragtor.503155
Avast	FileRepMalware [Misc]
Rising	Trojan.Agent!8.B1E (TFE:5:Z0PIyDmzIaO)
Emsisoft	Gen:Variant.Fragtor.503155 (B)
Sophos	Generic Reputation PUA (PUA)
SentinelOne	Static AI – Suspicious PE
GData	Gen:Variant.Fragtor.503155
Arcabit	Trojan.Fragtor.D7AD73
Microsoft	Trojan:Win32/Wacatac.B!ml
AhnLab-V3	Trojan/Win.Generic.R634642
McAfee	Artemis!9C607C5C51D6
MAX	malware (ai score=80)
Cylance	unsafe
AVG	FileRepMalware [Misc]
DeepInstinct	MALICIOUS

How to remove Fragtor.503155?

Fragtor.503155 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X