Malware

Fugrafa.194388 removal

Malware Removal

The Fugrafa.194388 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Fugrafa.194388 virus can do?

  • Executable code extraction
  • Attempts to connect to a dead IP:Port (1 unique times)
  • Creates RWX memory
  • Drops a binary and executes it
  • Performs some HTTP requests
  • Unconventionial language used in binary resources: Spanish (Paraguay)
  • The binary likely contains encrypted or compressed data.
  • Checks for the presence of known windows from debuggers and forensic tools
  • Installs itself for autorun at Windows startup
  • Creates a hidden or system file
  • Attempts to identify installed AV products by installation directory
  • Checks the CPU name from registry, possibly for anti-virtualization
  • Detects VirtualBox through the presence of a registry key
  • Attempts to modify proxy settings

Related domains:

z.whorecord.xyz
a.tomx.xyz
iplogger.org
warmbeddy.top

How to determine Fugrafa.194388?


File Info:

crc32: B23F949F
md5: b40a14305b0162c07489a6dbf7e0f5e6
name: B40A14305B0162C07489A6DBF7E0F5E6.mlw
sha1: d921f98aa0cb85d63edd54ddc70c23cdb4ddb1dc
sha256: 2e3dbb786b355c3f8fad4c177d7c788664d50ae158efa0d4e442063a33c061cf
sha512: 03a717efe40968561360ceed3bc3118d5f69be739196671697151cf89a6489a9baaa3e2911ac7caa8c1f8897dc95facd50cd154a8fd77b6ddfc80f99bc123adf
ssdeep: 12288:0HlroYeugNir99JnRIduSeJvYE0IRJA58CgxChFX9ehqe2U6UxP6hrK8dMbOp3G:Olr7Y0VGuxQ7mJG8mhFX1e2CxsKLyxY
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

Translations: 0x0512 0x00ac

Fugrafa.194388 also known as:

BkavW32.AIDetect.malware2
Elasticmalicious (high confidence)
McAfeeArtemis!B40A14305B01
CrowdStrikewin/malicious_confidence_90% (W)
BitDefenderGen:Variant.Fugrafa.194388
BaiduWin32.Trojan.Kryptik.jm
CyrenW32/Kryptik.FRX.gen!Eldorado
SymantecML.Attribute.HighConfidence
APEXMalicious
CynetMalicious (score: 100)
KasperskyUDS:DangerousObject.Multi.Generic
McAfee-GW-EditionBehavesLike.Win32.Lockbit.bc
FireEyeGeneric.mg.b40a14305b0162c0
SentinelOneStatic AI – Suspicious PE
eGambitUnsafe.AI_Score_85%
MicrosoftTrojan:Win32/Woreflint.A!cl
GDataGen:Variant.Fugrafa.194388
AhnLab-V3Trojan/Win.MalPe.R419177
Acronissuspicious
VBA32BScope.Trojan.Sabsik.FL
MalwarebytesTrojan.MalPack.GS
PandaTrj/Genetic.gen
RisingMalware.Heuristic!ET#79% (RDMK:cmRtazqwFwIOk0DOQyVgB33Hs2CL)
IkarusTrojan.Agent
MaxSecureTrojan.Malware.300983.susgen

How to remove Fugrafa.194388?

Fugrafa.194388 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment