Categories: Malware

What is “Fragtor.50848 (B)”?

The Fragtor.50848 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Fragtor.50848 (B) virus can do?

SetUnhandledExceptionFilter detected (possible anti-debug)
Dynamic (imported) function loading detected
Presents an Authenticode digital signature
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Fragtor.50848 (B)?


File Info:
name: 936EF2F38B96EE80034A.mlwpath: /opt/CAPEv2/storage/binaries/98d7211b9addf3f8ae72cfe3a2962f15e666c309409e892f828fc3c5e9641d12crc32: 55959FE2md5: 936ef2f38b96ee80034ada22a72b0bfbsha1: 062c6e3adab4e0fa1c80dc5460c87926a97ed4b3sha256: 98d7211b9addf3f8ae72cfe3a2962f15e666c309409e892f828fc3c5e9641d12sha512: 59f982464eedc100a1824f379fde648a235935a4d4eb13a788487b8da717d5e14a0e083b1f0c811ad6d4f42ddedb76e87d4b4e2d22caee1d5ed2f7b16b38d72bssdeep: 24576:MJgOXUPPTYwroAa5+t0pOdRJ59FF96X0JxQg:MkHTdroA5eOD/type: PE32 executable (console) Intel 80386, for MS Windowstlsh: T15C85A152A54842EDCC2D0E30C5946631F924AC9FBF1EF1C72D6C7A2A5477EE0253B2A7sha3_384: 82029032cddde79476980d4113d5b99caecdd5ce199ee29fd8a37c9b47c18f5bcc1547901548c58292f888fd1c94bd4dep_bytes: e9c38f0100e94c8f0100e987d80000e9timestamp: 2020-12-09 13:07:56
Version Info:
CompanyName: Oracle CorporationFileDescription: Java(TM) Platform SE binaryFileVersion: 8.0.2810.9Full Version: 1.8.0_281-b09InternalName: unpack200LegalCopyright: Copyright © 2020OriginalFilename: unpack200.exeProductName: Java(TM) Platform SE 8ProductVersion: 8.0.2810.9Translation: 0x0000 0x04b0

Fragtor.50848 (B) also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Fragtor.50848
FireEye	Gen:Variant.Fragtor.50848
McAfee	Artemis!936EF2F38B96
Malwarebytes	Malware.AI.355033539
TrendMicro-HouseCall	TROJ_GEN.R03BH09A422
ClamAV	Win.Trojan.Midie-9870242-0
BitDefender	Gen:Variant.Fragtor.50848
Avast	Win32:Malware-gen
Ad-Aware	Gen:Variant.Fragtor.50848
Emsisoft	Gen:Variant.Fragtor.50848 (B)
McAfee-GW-Edition	Artemis
Sophos	Generic ML PUA (PUA)
Ikarus	Worm.Win32.Soulclose
Jiangmin	Packed.Krap.gvuo
MAX	malware (ai score=82)
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
GData	Gen:Variant.Fragtor.50848
Cynet	Malicious (score: 100)
VBA32	Trojan.Downloader
ALYac	Gen:Variant.Fragtor.50848
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.121218.susgen
Fortinet	W32/PossibleThreat
AVG	Win32:Malware-gen
CrowdStrike	win/malicious_confidence_60% (W)