Categories: Malware

Fugrafa.225136 (file analysis)

The Fugrafa.225136 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Fugrafa.225136 virus can do?

SetUnhandledExceptionFilter detected (possible anti-debug)
Dynamic (imported) function loading detected
Enumerates the modules from a process (may be used to locate base addresses in process injection)
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Detects Sandboxie through the presence of a library
Detects Avast Antivirus through the presence of a library

How to determine Fugrafa.225136?


File Info:
name: 1F4AF1F2BCE7B21AB2AA.mlwpath: /opt/CAPEv2/storage/binaries/bc65a08dc07a1cf1fa48111fa9cac18a3264e85756c00e43281a58d35d13c3c3crc32: C3660A0Amd5: 1f4af1f2bce7b21ab2aaf80e23594efdsha1: 86fcfb2fd2430f9199d7998400cbb9ccd87cc9d9sha256: bc65a08dc07a1cf1fa48111fa9cac18a3264e85756c00e43281a58d35d13c3c3sha512: 7c497050e2038ed67114469f322f8060d2617eb9c3a4de647180f0cc726a2975209e4937a9b7073ea397c3d4db1da881d4db1234e1456350ffcf7287616f4facssdeep: 24576:A5BR0MM1tGw79WadzhFaf1qhGf+Y9VsJ0oUb7qrDQwCf+69G+TE:8UMA79Wadz8Mh4+Y9yX4qr6type: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T10E552376BB67E0B1D8A900349854D7A526E9F8341B8105E7F3861EDDBE78AD1B83C343sha3_384: 01125cc54692e29865c5e8be2886471c917682d63e6401f69ad973b52b64b443a5151d645d1c768e356b1215fe753389ep_bytes: e8a61f0000e958fdffffff25f0404100timestamp: 2011-07-29 17:44:00
Version Info:
0: [No Data]

Fugrafa.225136 also known as:

Lionic	Trojan.Win32.Fruit.m!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Fugrafa.225136
FireEye	Generic.mg.1f4af1f2bce7b21a
McAfee	GenericRXOW-RQ!1F4AF1F2BCE7
Cylance	Unsafe
Sangfor	Backdoor.Win32.Fruit.gen
K7AntiVirus	Trojan ( 0057c88e1 )
Alibaba	Backdoor:Win32/Fruit.6ab49a3a
K7GW	Trojan ( 0057c88e1 )
CrowdStrike	win/malicious_confidence_100% (W)
Cyren	W32/FakeFolder.S.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Agent.ADBW
APEX	Malicious
Kaspersky	HEUR:Backdoor.Win32.Fruit.gen
BitDefender	Gen:Variant.Fugrafa.225136
Avast	Win32:Trojan-gen
Tencent	Malware.Win32.Gencirc.10ce7e10
Emsisoft	Gen:Variant.Fugrafa.225136 (B)
TrendMicro	TROJ_GEN.R002C0PB122
McAfee-GW-Edition	BehavesLike.Win32.Generic.tc
Sophos	Mal/Generic-S
SentinelOne	Static AI – Malicious PE
Avira	HEUR/AGEN.1221323
Antiy-AVL	Trojan/Generic.ASMalwS.351DD7A
Gridinsoft	Ransom.Win32.Wacatac.sa
Microsoft	Trojan:Win32/Tnega!ml
ZoneAlarm	HEUR:Backdoor.Win32.Fruit.gen
GData	Gen:Variant.Fugrafa.225136
Cynet	Malicious (score: 100)
AhnLab-V3	Dropper/Win32.Agent.C1956471
BitDefenderTheta	Gen:NN.ZexaF.34182.pvW@aOIVlpgi
ALYac	Gen:Variant.Fugrafa.225136
MAX	malware (ai score=82)
VBA32	BScope.Trojan.Hesv
Malwarebytes	Malware.AI.3533846930
TrendMicro-HouseCall	TROJ_GEN.R002C0PB122
Rising	Malware.FakeFolder/ICON!1.6AA9 (CLOUD)
Ikarus	Trojan.Win32.Agent
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Agent.ADBW!tr
AVG	Win32:Trojan-gen
Cybereason	malicious.fd2430
Panda	Trj/GdSda.A