Categories: Malware

About “Fragtor.59726” infection

The Fragtor.59726 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Fragtor.59726 virus can do?

Behavioural detection: Executable code extraction – unpacking
Sample contains Overlay data
Yara rule detections observed from a process memory dump/dropped files/CAPE
Presents an Authenticode digital signature
CAPE extracted potentially suspicious content
Unconventionial language used in binary resources: Spanish (Argentina)
Authenticode signature is invalid
CAPE detected the RedLine malware family
Anomalous binary characteristics

How to determine Fragtor.59726?


File Info:
name: 2EDA66DE6C910A702779.mlwpath: /opt/CAPEv2/storage/binaries/4233600a53f9096d5f145ae0be5aa2a88d4401afa24174830b5047c698a84df0crc32: 506C276Amd5: 2eda66de6c910a7027795eb6846b9887sha1: 61d2a63ccb0ea629e36b7274d2822a3f04a2a6a9sha256: 4233600a53f9096d5f145ae0be5aa2a88d4401afa24174830b5047c698a84df0sha512: 779c1b3f3dd334224b34a6ce887ee3e389caf8356ec7d6642c27bf89df14b41d78724c7320a538b84b69853657de5159cdd7dd90ea640b1f36dfa4674d0ff69assdeep: 6144:O7yL721RqI854It7vItRSP0CHFvjf/U3c68B2+uzbgwuJGHo:V/21R454I+qM6b0T+unnXHotype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T149A4F13636D8C432C6830D714871CAA55B39E9311B61814BBAA9277E5F70F8CAFE631Dsha3_384: 7f8114b699bca3ce3cdf165306f9a08fb92b9db38d98be3422bc1fc2917d6d4a45533daaa4524c428893a162c7eac018ep_bytes: e82a5c0000e979feffffcccccccccccctimestamp: 2020-10-17 06:13:09
Version Info:
InternationalName: bomgvioci.iwaCopyright: Copyrighz (C) 2021, fudkortProjectVersion: 3.10.70.17Translation: 0x0129 0x0794

Fragtor.59726 also known as:

Bkav	W32.AIDetect.malware2
tehtris	Generic.Malware
DrWeb	Trojan.Siggen16.30429
MicroWorld-eScan	Gen:Variant.Fragtor.59726
FireEye	Generic.mg.2eda66de6c910a70
CAT-QuickHeal	Trojan.ForeiPMF.S26111909
ALYac	Gen:Variant.Fragtor.59726
Malwarebytes	Trojan.MalPack
VIPRE	Gen:Variant.Fragtor.59726
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Trojan ( 0058cd341 )
Alibaba	Ransom:Win32/StopCrypt.eadc4877
K7GW	Trojan ( 0058cd341 )
BitDefenderTheta	Gen:NN.ZexaF.34606.BqX@aefAM8Ge
Cyren	W32/Qbot.FK.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/Kryptik.HNYH
APEX	Malicious
Paloalto	generic.ml
ClamAV	Win.Malware.Mikey-9917879-0
Kaspersky	HEUR:Trojan-Spy.Win32.Stealer.gen
BitDefender	Gen:Variant.Fragtor.59726
NANO-Antivirus	Trojan.Win32.Stealer.jqvnyj
SUPERAntiSpyware	Trojan.Agent/Gen-Dropper
Avast	Win32:AceCrypter-B [Cryp]
Tencent	Trojan-ransom.Win32.Stop.16000284
Ad-Aware	Gen:Variant.Fragtor.59726
Emsisoft	Gen:Variant.Fragtor.59726 (B)
Zillya	Trojan.Kryptik.Win32.3851909
TrendMicro	Ransom_StopCrypt.R007C0DGT22
McAfee-GW-Edition	Packed-GDT!2EDA66DE6C91
Trapmine	malicious.high.ml.score
Sophos	Mal/Generic-R + Mal/Agent-AWV
SentinelOne	Static AI – Malicious PE
GData	Win32.Trojan.BSE.16VOW5Z
Jiangmin	Trojan.Stop.csz
Google	Detected
Avira	TR/AD.GenSHCode.dwxby
MAX	malware (ai score=88)
Antiy-AVL	Trojan/Generic.ASMalwS.69C9
Arcabit	Trojan.Fragtor.DE94E
ViRobot	Trojan.Win32.Z.Stopcrypt.449520.A
Microsoft	Ransom:Win32/StopCrypt.PAL!MTB
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win.MalPE.R463520
McAfee	GenericRXAA-AA!2EDA66DE6C91
VBA32	BScope.Trojan.Convagent
Cylance	Unsafe
TrendMicro-HouseCall	Ransom_StopCrypt.R007C0DGT22
Rising	Trojan.Kryptik!1.DB29 (CLASSIC)
Yandex	Trojan.Kryptik!sC0Oua8kPIk
Ikarus	Trojan-Ransom.StopCrypt
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/GenericKDZ.6DF1!tr
AVG	Win32:AceCrypter-B [Cryp]
Panda	Trj/GdSda.A
CrowdStrike	win/malicious_confidence_100% (W)