Malware

Should I remove “Fugrafa.103033”?

Malware Removal

The Fugrafa.103033 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Fugrafa.103033 virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Yara rule detections observed from a process memory dump/dropped files/CAPE
  • CAPE extracted potentially suspicious content
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Uses Windows utilities for basic functionality
  • Behavioural detection: Injection (Process Hollowing)
  • Behavioural detection: Injection (inter-process)
  • Behavioural detection: Injection with CreateRemoteThread in a remote process
  • Attempts to modify proxy settings
  • Creates a copy of itself
  • Harvests cookies for information gathering
  • Uses suspicious command line tools or Windows utilities

How to determine Fugrafa.103033?


File Info:

name: 8575DA3092C0EDE924F9.mlw
path: /opt/CAPEv2/storage/binaries/ab752a81bb9fd06e6c9d3a1e4a6213efb94e9393f6f3cd18c180b3a7ba6bfa1c
crc32: 7EFA76A3
md5: 8575da3092c0ede924f99b17e3b9f100
sha1: 64a6ee8cee5d8fd155d2de0b88721c241dd50751
sha256: ab752a81bb9fd06e6c9d3a1e4a6213efb94e9393f6f3cd18c180b3a7ba6bfa1c
sha512: ab9b7b45aab1a10e9b3f6ffb0333917ed6429ecdec8775863883166d095b3504ff69b63124af2322c6eb540609af5ddee929a48bcd4e5d2fd6240b43b1520854
ssdeep: 3072:ivHMuLvCSs19JEw/NLVlCxSVgSerwbVurDGS5/uILlpck+:i/MuLvLgLVlCxSVIEfS5/yl
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T12A148B5A39CFB3F9EEE4143C98169F9B77C2F74B16A6CD1CC4096348B894C8C51B8668
sha3_384: e179e35b5d16d8a7702076415752d570ec64b256d89a119e0d4ddb8a6e7d25bf99b7387bbe9d2674f699d0631d3facbf
ep_bytes: 5589e583ec08c7042402000000ff1564
timestamp: 2003-07-25 15:43:59

Version Info:

0: [No Data]

Fugrafa.103033 also known as:

BkavW32.AIDetect.malware2
LionicTrojan.Win32.Generic.lJPW
Elasticmalicious (high confidence)
DrWebTrojan.DownLoader9.34196
MicroWorld-eScanGen:Variant.Fugrafa.103033
FireEyeGeneric.mg.8575da3092c0ede9
CAT-QuickHealVirTool.CeeInject.A
ALYacGen:Variant.Fugrafa.103033
CylanceUnsafe
VIPREGen:Variant.Fugrafa.103033
SangforTrojan.Win32.Injector.AILN
K7AntiVirusTrojan ( 0040f6261 )
AlibabaVirTool:Win32/CeeInject.3d591757
K7GWTrojan ( 0040f6261 )
CrowdStrikewin/malicious_confidence_100% (W)
BitDefenderThetaGen:NN.ZexaF.34698.lyW@aKHGpPl
VirITTrojan.Win32.SHeur4.BLPE
SymantecW32.IRCBot.NG
ESET-NOD32a variant of Win32/Injector.AILN
Paloaltogeneric.ml
ClamAVWin.Trojan.Generickd-839
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderGen:Variant.Fugrafa.103033
NANO-AntivirusTrojan.Win32.Buzus.crmjre
AvastWin32:Downloader-TSG [Trj]
TencentMalware.Win32.Gencirc.10b3b03f
Ad-AwareGen:Variant.Fugrafa.103033
EmsisoftGen:Variant.Fugrafa.103033 (B)
ComodoTrojWare.Win32.Injector.AMDV@5273qu
ZillyaTrojan.Injector.Win32.201884
McAfee-GW-EditionBehavesLike.Win32.Trojan.cc
Trapminemalicious.high.ml.score
SophosML/PE-A + Mal/EncPk-AKT
SentinelOneStatic AI – Malicious PE
GDataGen:Variant.Fugrafa.103033
JiangminTrojan/Blocker.eru
GoogleDetected
AviraHEUR/AGEN.1231673
Antiy-AVLTrojan/Generic.ASMalwS.24D
ArcabitTrojan.Fugrafa.D19279
MicrosoftVirTool:Win32/CeeInject.gen!HL
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win32.Inject.C170304
Acronissuspicious
McAfeePWS-Zbot-FBFI!8575DA3092C0
MAXmalware (ai score=100)
VBA32BScope.Trojan.Downloader
MalwarebytesVB.Virus.FileInfector.DDS
APEXMalicious
RisingTrojan.Generic!8.C3 (TFE:1:yYog2AGD75T)
YandexTrojan.Agent!7PbpXXRXZeo
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Injector.AKER!tr
AVGWin32:Downloader-TSG [Trj]
Cybereasonmalicious.092c0e
PandaTrj/Genetic.gen

How to remove Fugrafa.103033?

Fugrafa.103033 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment