Malware

Fragtor.87876 (file analysis)

Malware Removal

The Fragtor.87876 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Fragtor.87876 virus can do?

  • The binary contains an unknown PE section name indicative of packing
  • The executable is compressed using UPX
  • Authenticode signature is invalid

How to determine Fragtor.87876?


File Info:

name: D626BAEFF248B3F7A7BE.mlw
path: /opt/CAPEv2/storage/binaries/30c4de19d513a14385feeab73e9f19986a7f7d1a0ea0bc555bd644cfdca4a16b
crc32: 44F19C52
md5: d626baeff248b3f7a7bed9cd00e4b128
sha1: b329961a80204d8b68e5be5726c23288714dd2b5
sha256: 30c4de19d513a14385feeab73e9f19986a7f7d1a0ea0bc555bd644cfdca4a16b
sha512: cc598dd03203f6756bad969128b95dd7d41d28ff0bd48a06b05ffe5eabf526faf8323b77bc0f6f0c403daa8f26e88922f62d97fe158383f34993223c5f9fbd31
ssdeep: 192:ircAU8mhg4pYlRMJ06w9kOD5mZJg7EaX8hCv2C4YuCn/5ezn:lINlRe0h9kY5QYWCuC4YuCn/wn
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1C2426CA9CB650A76C9CD0538F4B190235EB93C709B23BD83DB4C76573CD62C8D4282DA
sha3_384: f3d2c7e257f355315d860deb98595c2acb94c8f811187540fd6a34898a67ab981598a6d7119d2397ee493d0310baedf6
ep_bytes: 60be002042008dbe00f0fdff5783cdff
timestamp: 2008-03-14 10:18:02

Version Info:

0: [No Data]

Fragtor.87876 also known as:

BkavW32.AIDetectMalware
MicroWorld-eScanGen:Variant.Fragtor.87876
FireEyeGeneric.mg.d626baeff248b3f7
McAfeeArtemis!D626BAEFF248
MalwarebytesGeneric.Malware.AI.DDS
SangforSuspicious.Win32.Save.ins
Cybereasonmalicious.a80204
BitDefenderThetaGen:NN.ZexaF.36318.amW@auIRISc
VirITTrojan.Win32.Agent.BME
CyrenW32/S-9d4b91d7!Eldorado
SymantecML.Attribute.HighConfidence
Elasticmalicious (moderate confidence)
APEXMalicious
ClamAVWin.Malware.Fragtor-10005368-0
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderGen:Variant.Fragtor.87876
AvastWin32:WormX-gen [Wrm]
EmsisoftGen:Variant.Fragtor.87876 (B)
F-SecureTrojan.TR/PSW.Agent.nhg
DrWebTrojan.PWS.Pace
VIPREGen:Variant.Fragtor.87876
McAfee-GW-EditionBehavesLike.Win32.Generic.lm
Trapminemalicious.high.ml.score
SophosML/PE-A
IkarusTrojan.PSW.Agent
GDataGen:Variant.Fragtor.87876
JiangminTrojan.Generic.hhjqu
GoogleDetected
AviraTR/PSW.Agent.nhg
Antiy-AVLWorm/Win32.Socks
XcitiumPacked.Win32.MUPX.Gen@24tbus
ArcabitTrojan.Fragtor.D15744
ZoneAlarmHEUR:Trojan.Win32.Generic
MicrosoftTrojan:Win32/Wacatac.B!ml
CynetMalicious (score: 100)
AhnLab-V3Worm/Win32.Socks.R2896
ALYacGen:Variant.Fragtor.87876
MAXmalware (ai score=85)
Cylanceunsafe
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.7164915.susgen
FortinetW32/ULPM.2C75!tr
AVGWin32:WormX-gen [Wrm]
DeepInstinctMALICIOUS
CrowdStrikewin/malicious_confidence_100% (W)

How to remove Fragtor.87876?

Fragtor.87876 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment