Malware

Fugrafa.256354 removal instruction

Malware Removal

The Fugrafa.256354 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Fugrafa.256354 virus can do?

  • SetUnhandledExceptionFilter detected (possible anti-debug)
  • Executed a command line with /C or /R argument to terminate command shell on completion which can be used to hide execution
  • Dynamic (imported) function loading detected
  • Network anomalies occured during the analysis.
  • Reads data out of its own binary image
  • A process created a hidden window
  • Drops a binary and executes it
  • Authenticode signature is invalid
  • A ping command was executed with the -n argument possibly to delay analysis
  • Uses Windows utilities for basic functionality
  • Created a process from a suspicious location
  • Uses suspicious command line tools or Windows utilities

How to determine Fugrafa.256354?


File Info:

name: D3679A14D8DA86E5F7D9.mlw
path: /opt/CAPEv2/storage/binaries/8d2e30f1f69ab0582a49ef6af7ff54aa820605453a4db6311418388b2a0c1cdd
crc32: F6830E46
md5: d3679a14d8da86e5f7d909743947d70b
sha1: f4d50b87a05690895ccec612df31b03cfaaee471
sha256: 8d2e30f1f69ab0582a49ef6af7ff54aa820605453a4db6311418388b2a0c1cdd
sha512: f5f5f054c1d184a35046aa826af64410ef1357d630ce3b31da2e9d5cf114da1368fbe6004019768453490a179123545b6fd825b94d78fa6def7e8564cf8beb1d
ssdeep: 768:rHutbVl9xjXvKBBW5bhmIB3hvFzen7lm:ruDjSBBWXag
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T157C2AFDFF1814C31DAA076F654726AB9C7FEB830F631B8218B78D7051957450EB0A78A
sha3_384: ca7ef3ad2bb954347364f968cc497ac3db5b89c0133ac55422d49fda39141492df3d10872a816415260ab4833c7d0104
ep_bytes: e8b1020000e974feffff558becff7508
timestamp: 2020-12-13 23:46:04

Version Info:

0: [No Data]

Fugrafa.256354 also known as:

BkavW32.AIDetect.malware2
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.Fugrafa.256354
McAfeeGenericRXNV-VM!D3679A14D8DA
CylanceUnsafe
K7GWPassword-Stealer ( 005937271 )
K7AntiVirusPassword-Stealer ( 005937271 )
CyrenW32/Agent.ENB.gen!Eldorado
ESET-NOD32a variant of Win32/PSW.Agent.OOO
APEXMalicious
ClamAVWin.Malware.Fugrafa-9950512-0
KasperskyHEUR:Trojan.Win32.SelfDel.vho
BitDefenderGen:Variant.Fugrafa.256354
AvastWin32:Malware-gen
RisingTrojan.PSW!1.DE3E (CLASSIC)
Ad-AwareGen:Variant.Fugrafa.256354
EmsisoftGen:Variant.Fugrafa.256354 (B)
ZillyaTrojan.SelfDel.Win32.65008
McAfee-GW-EditionGenericRXNV-VM!D3679A14D8DA
FireEyeGeneric.mg.d3679a14d8da86e5
SophosML/PE-A + Troj/PWS-CMJ
IkarusTrojan.DelFiles
GDataGen:Variant.Fugrafa.256354
JiangminTrojan.Selfdel.rft
AviraHEUR/AGEN.1234650
MAXmalware (ai score=80)
ArcabitTrojan.Fugrafa.D3E962
MicrosoftTrojan:Win32/Wacatac.B!ml
CynetMalicious (score: 99)
AhnLab-V3Malware/Win.Reputation.R496203
Acronissuspicious
ALYacGen:Variant.Fugrafa.256354
VBA32BScope.Trojan.Occamy
MalwarebytesMalware.AI.2397151589
TencentTrojan.Win32.Selfdel.xb
MaxSecureTrojan.Malware.5437263.susgen
FortinetW32/SelfDef.26C0!tr
AVGWin32:Malware-gen
Cybereasonmalicious.4d8da8
PandaTrj/Genetic.gen

How to remove Fugrafa.256354?

Fugrafa.256354 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment