Fugrafa.256390 (B) (file analysis)

The Fugrafa.256390 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Fugrafa.256390 (B) virus can do?

• SetUnhandledExceptionFilter detected (possible anti-debug)
• Executed a command line with /C or /R argument to terminate command shell on completion which can be used to hide execution
• Dynamic (imported) function loading detected
• Network anomalies occured during the analysis.
• Reads data out of its own binary image
• A process created a hidden window
• Drops a binary and executes it
• Authenticode signature is invalid
• A ping command was executed with the -n argument possibly to delay analysis
• Uses Windows utilities for basic functionality
• Created a process from a suspicious location
• Uses suspicious command line tools or Windows utilities

How to determine Fugrafa.256390 (B)?

File Info:
name: 4F1408ADC5212306B3B1.mlw
path: /opt/CAPEv2/storage/binaries/edf123e1c69b961033b0f5f9610b5a8996e7348761ea89ec7323a3be194dd6d5
crc32: D8FACA69
md5: 4f1408adc5212306b3b16cca385e02b1
sha1: 810417ce88a233650d212b09012a16817d99e300
sha256: edf123e1c69b961033b0f5f9610b5a8996e7348761ea89ec7323a3be194dd6d5
sha512: 8523a8c36de4e16e8dedcacdecd70251ef8d0772d537e011d4746e90b753b40b384f0de0badbe9a82afd6991e729ab2e65c04d64615aae6ea67e94c281a819fa
ssdeep: 384:vWMbLISzUx9eh3O4Oj09RXjXz7XjCWwqK8Wzz8WW5bIwHpeb6e/kfk3X2nMS:OsL/Yba399xjXvKBBW5bp4l8M7S
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T17AC28E93B7E078B1CD9286B56536D97782BFFF302971E5829B10EA1109E2150EF09BCD
sha3_384: abdfea1441969558444e42ca44fed7e2c8387a9d86b22cd051db561d94f16c134696affb5d9995b748726ec14d782b5f
ep_bytes: e8b1020000e974feffff558becff7508
timestamp: 2020-12-13 23:46:04

Version Info:
0: [No Data]

Fugrafa.256390 (B) also known as:

How to remove Fugrafa.256390 (B)?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.