Malware

Fragtor.97622 (B) removal

Malware Removal

The Fragtor.97622 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Fragtor.97622 (B) virus can do?

  • SetUnhandledExceptionFilter detected (possible anti-debug)
  • Executed a command line with /C or /R argument to terminate command shell on completion which can be used to hide execution
  • Dynamic (imported) function loading detected
  • Network anomalies occured during the analysis.
  • Reads data out of its own binary image
  • A process created a hidden window
  • Drops a binary and executes it
  • Authenticode signature is invalid
  • A ping command was executed with the -n argument possibly to delay analysis
  • Uses Windows utilities for basic functionality
  • Created a process from a suspicious location
  • Uses suspicious command line tools or Windows utilities

How to determine Fragtor.97622 (B)?


File Info:

name: 927EE35EF4FEEF00E02E.mlw
path: /opt/CAPEv2/storage/binaries/7f76b80addc4175e170df94ff7535bc2712c8393e2472e2d945d6a7a854e6b30
crc32: 4C5A8E5A
md5: 927ee35ef4feef00e02ed1839cb71bf4
sha1: 25b356a5341fa5e2cae9f67717f15b15d00a4bac
sha256: 7f76b80addc4175e170df94ff7535bc2712c8393e2472e2d945d6a7a854e6b30
sha512: cfa78234a34b0138924cd9842f852338462047723a5ff54800be84f607ca462a86d1cab7e95242a30253503c12eec71a9e1534e7ea7e5a195e33ea0edbbc049e
ssdeep: 768:6CUibb3uuK9xjXvKBBW5be7uQIYmS1zq:6CflKDjSBBW87u7ao
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T113C29E83B3948930EBF183BA55B16FB4A57FF8203D26F6538B20E99718B2241F9155C7
sha3_384: 6ea3ea0f77a67ac4218daee874295a7410555600979eecff3c7d4c7acb793f4b9611f6220a48f04807d9a7c185440a1a
ep_bytes: e8b1020000e974feffff558becff7508
timestamp: 2020-12-13 23:46:04

Version Info:

0: [No Data]

Fragtor.97622 (B) also known as:

Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.Fragtor.97622
FireEyeGeneric.mg.927ee35ef4feef00
ALYacGen:Variant.Fragtor.97622
CylanceUnsafe
ZillyaTrojan.SelfDel.Win32.65008
K7AntiVirusPassword-Stealer ( 005937271 )
K7GWPassword-Stealer ( 005937271 )
Cybereasonmalicious.ef4fee
CyrenW32/Agent.ENB.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/PSW.Agent.OOO
APEXMalicious
ClamAVWin.Malware.Fugrafa-9950512-0
KasperskyHEUR:Trojan.Win32.SelfDel.vho
BitDefenderGen:Variant.Fragtor.97622
NANO-AntivirusTrojan.Win32.SelfDel.jpepdv
AvastWin32:Malware-gen
TencentTrojan.Win32.Selfdel.xb
Ad-AwareGen:Variant.Fragtor.97622
EmsisoftGen:Variant.Fragtor.97622 (B)
DrWebTrojan.MulDrop20.10627
VIPREGen:Variant.Fragtor.97622
McAfee-GW-EditionBehavesLike.Win32.Generic.mh
SophosTroj/PWS-CMJ
SentinelOneStatic AI – Suspicious PE
GDataGen:Variant.Fragtor.97622
JiangminTrojan.Selfdel.rft
AviraHEUR/AGEN.1234650
Antiy-AVLTrojan/Generic.ASBOL.C6F8
MicrosoftTrojan:Win32/Wacatac.B!ml
CynetMalicious (score: 100)
AhnLab-V3Malware/Win.Reputation.R496203
Acronissuspicious
McAfeeGenericRXNV-VM!927EE35EF4FE
MAXmalware (ai score=87)
VBA32BScope.Trojan.Occamy
MalwarebytesMalware.AI.2397151589
RisingStealer.Agent!1.DE3E (CLASSIC)
TACHYONTrojan/W32.Fugrafa.26112
FortinetW32/SelfDef.26C0!tr
AVGWin32:Malware-gen
PandaTrj/Genetic.gen

How to remove Fragtor.97622 (B)?

Fragtor.97622 (B) removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment