About “Fugrafa.257489 (B)” infection

The Fugrafa.257489 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Fugrafa.257489 (B) virus can do?

• SetUnhandledExceptionFilter detected (possible anti-debug)
• Executed a command line with /C or /R argument to terminate command shell on completion which can be used to hide execution
• Dynamic (imported) function loading detected
• Network anomalies occured during the analysis.
• Reads data out of its own binary image
• A process created a hidden window
• Drops a binary and executes it
• Authenticode signature is invalid
• A ping command was executed with the -n argument possibly to delay analysis
• Uses Windows utilities for basic functionality
• Created a process from a suspicious location
• Uses suspicious command line tools or Windows utilities

How to determine Fugrafa.257489 (B)?

File Info:
name: 6FA43FACB12A6D6BCAD6.mlw
path: /opt/CAPEv2/storage/binaries/7f3fd005ccfade5f3d859b45da46367c03a910696e3af9b9e3f2edd940833fd5
crc32: 78B11946
md5: 6fa43facb12a6d6bcad6e03dde26bcca
sha1: 0de895947e67eeb5be70d4d034587e0fc45c96bf
sha256: 7f3fd005ccfade5f3d859b45da46367c03a910696e3af9b9e3f2edd940833fd5
sha512: 7ec54c74bb9e9f59bdfc3c981033a30ca8d48f918b1a9b12989cf21129a9197fdfebb5d6e6facb3c09b4e98f0c458e0d3f63661d64e2e05c704bfb34d6495e09
ssdeep: 768:t/XWDQebyRoE69xjXvKBBW5bIPlqjwtGht:t/iQ9Ro1DjSBBWzwtGb
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T1DCC28D53F9C05963CF504F765271BBBC83BB78322E2598529690EC091BEADF0C92935B
sha3_384: 2085f0b47316902fc54f798b61f6b2699f6e4ccf76d3cdc410521129fbe5eb271a60a6eebe32fe13047b3b16c7848034
ep_bytes: e8b1020000e974feffff558becff7508
timestamp: 2020-12-13 23:46:04

Version Info:
0: [No Data]

Fugrafa.257489 (B) also known as:

How to remove Fugrafa.257489 (B)?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.