Malware

What is “Fragtor.94849 (B)”?

Malware Removal

The Fragtor.94849 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Fragtor.94849 (B) virus can do?

  • SetUnhandledExceptionFilter detected (possible anti-debug)
  • Executed a command line with /C or /R argument to terminate command shell on completion which can be used to hide execution
  • Dynamic (imported) function loading detected
  • Network anomalies occured during the analysis.
  • Reads data out of its own binary image
  • A process created a hidden window
  • Drops a binary and executes it
  • Authenticode signature is invalid
  • A ping command was executed with the -n argument possibly to delay analysis
  • Uses Windows utilities for basic functionality
  • Created a process from a suspicious location
  • Uses suspicious command line tools or Windows utilities

How to determine Fragtor.94849 (B)?


File Info:

name: 50D1A9667AD4F410E18F.mlw
path: /opt/CAPEv2/storage/binaries/8dc5ab5ebb06071a87b1c4f7d281a84125dfa48798e33d0781bbfc38bfbe7695
crc32: C1354D25
md5: 50d1a9667ad4f410e18f728f64f3d9ae
sha1: e749d41c881eb5aedb190f0a069332bc3115bc08
sha256: 8dc5ab5ebb06071a87b1c4f7d281a84125dfa48798e33d0781bbfc38bfbe7695
sha512: f13e9ad579fd86109ed76212057a687b5cb5b57b281cef1a1ee1e707dda07ce480a1465db70ab3fb1eac6d31835d46105d5fa82d38cdea5dd99627149ce1f63d
ssdeep: 384:wWLS9AUx9xSve09RXjXz7XjCWwqK8Wzz8WW5bIwHTZL+BEAvxAx3mdDJbi:vLSlbod9xjXvKBBW5bYlMX
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T113C26CF7FBE088F1CB520BB1517249B5877FB0602F675AC68F20F41619E50A0F96A58B
sha3_384: b81d409bba215c05505a226de2af146334b348b1718fe6ae44f77cef88597e69cdb742201b6006693acd5b578f17b5ad
ep_bytes: e8b1020000e974feffff558becff7508
timestamp: 2020-12-13 23:46:04

Version Info:

0: [No Data]

Fragtor.94849 (B) also known as:

BkavW32.AIDetect.malware2
MicroWorld-eScanGen:Variant.Fragtor.94849
FireEyeGeneric.mg.50d1a9667ad4f410
ALYacGen:Variant.Fragtor.94849
CylanceUnsafe
K7AntiVirusPassword-Stealer ( 005937271 )
K7GWPassword-Stealer ( 005937271 )
Cybereasonmalicious.67ad4f
CyrenW32/Agent.ENB.gen!Eldorado
Elasticmalicious (high confidence)
ESET-NOD32a variant of Win32/PSW.Agent.OOO
APEXMalicious
ClamAVWin.Malware.Fugrafa-9950512-0
KasperskyHEUR:Trojan.Win32.SelfDel.vho
BitDefenderGen:Variant.Fragtor.94849
NANO-AntivirusTrojan.Win32.SelfDel.jpepdv
AvastWin32:Malware-gen
TencentTrojan.Win32.Selfdel.xb
Ad-AwareGen:Variant.Fragtor.94849
TACHYONTrojan/W32.Fugrafa.26112
EmsisoftGen:Variant.Fragtor.94849 (B)
DrWebTrojan.MulDrop20.10627
ZillyaTrojan.SelfDel.Win32.65008
McAfee-GW-EditionGenericRXNV-VM!50D1A9667AD4
SophosTroj/PWS-CMJ
SentinelOneStatic AI – Suspicious PE
GDataGen:Variant.Fragtor.94849
JiangminTrojan.Selfdel.rft
AviraHEUR/AGEN.1234650
ArcabitTrojan.Fragtor.D17281
MicrosoftTrojan:Win32/Wacatac.B!ml
CynetMalicious (score: 100)
AhnLab-V3Malware/Win.Reputation.R496203
Acronissuspicious
McAfeeGenericRXNV-VM!50D1A9667AD4
MAXmalware (ai score=80)
VBA32BScope.Trojan.Occamy
MalwarebytesMalware.AI.2397151589
RisingTrojan.PSW!1.DE3E (CLASSIC)
IkarusTrojan.DelFiles
MaxSecureTrojan.Malware.121218.susgen
FortinetW32/SelfDef.26C0!tr
AVGWin32:Malware-gen
PandaTrj/Genetic.gen

How to remove Fragtor.94849 (B)?

Fragtor.94849 (B) removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment