Malware

Fugrafa.257976 (B) removal tips

Malware Removal

The Fugrafa.257976 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Fugrafa.257976 (B) virus can do?

  • SetUnhandledExceptionFilter detected (possible anti-debug)
  • Executed a command line with /C or /R argument to terminate command shell on completion which can be used to hide execution
  • Dynamic (imported) function loading detected
  • Network anomalies occured during the analysis.
  • Reads data out of its own binary image
  • A process created a hidden window
  • Drops a binary and executes it
  • Authenticode signature is invalid
  • A ping command was executed with the -n argument possibly to delay analysis
  • Uses Windows utilities for basic functionality
  • Created a process from a suspicious location
  • Uses suspicious command line tools or Windows utilities

How to determine Fugrafa.257976 (B)?


File Info:

name: 4A823D9B7ED04AD8CDCB.mlw
path: /opt/CAPEv2/storage/binaries/c6f371f8b78c77d73e458c7c976ed94bf6fa4d6095ee665a24ad3896df8aa885
crc32: 7FDD7B23
md5: 4a823d9b7ed04ad8cdcb7d0087cc56bb
sha1: 3e1fff4ddae05923405641663eaa29f4ee635c22
sha256: c6f371f8b78c77d73e458c7c976ed94bf6fa4d6095ee665a24ad3896df8aa885
sha512: 72e34822efb19ecae652e16aa6d8c416f884ae7954c9d051b8dca5dec0399c32fc87542ce1e406a7553f43ba37f147ddae8c7bb1c0d7579314f7889ad12df2e9
ssdeep: 768:lzl9mKb70La9xjXvKBBW5bcuV+7+Yr6aBlcmC63JU:liXuDjSBBWP+5rHBlcO3JU
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T14DC28F87F6D04876ED400E3271B3E9B8C7BA78207F9295039B21DA291CF1464EF5564F
sha3_384: 6fc0bf115411e9e0e6d21816b886e2ee0da5638d222951c9deb5f0968ecc2a7e6bb3b250d5bec14d127502ccbdd11a0a
ep_bytes: e8b1020000e974feffff558becff7508
timestamp: 2020-12-13 23:46:04

Version Info:

0: [No Data]

Fugrafa.257976 (B) also known as:

Elasticmalicious (high confidence)
DrWebTrojan.MulDrop20.10627
MicroWorld-eScanGen:Variant.Fugrafa.257976
FireEyeGeneric.mg.4a823d9b7ed04ad8
McAfeeGenericRXNV-VM!4A823D9B7ED0
CylanceUnsafe
K7AntiVirusPassword-Stealer ( 005937271 )
K7GWPassword-Stealer ( 005937271 )
CyrenW32/Agent.ENB.gen!Eldorado
ESET-NOD32a variant of Win32/PSW.Agent.OOO
ClamAVWin.Malware.Fugrafa-9950512-0
KasperskyHEUR:Trojan.Win32.SelfDel.vho
BitDefenderGen:Variant.Fugrafa.257976
NANO-AntivirusTrojan.Win32.SelfDel.jpepdv
AvastWin32:Malware-gen
TencentTrojan.Win32.Selfdel.xb
Ad-AwareGen:Variant.Fugrafa.257976
SophosTroj/PWS-CMJ
ZillyaTrojan.SelfDel.Win32.65008
McAfee-GW-EditionGenericRXNV-VM!4A823D9B7ED0
EmsisoftGen:Variant.Fugrafa.257976 (B)
GDataGen:Variant.Fugrafa.257976
JiangminTrojan.Selfdel.rft
AviraHEUR/AGEN.1234650
MAXmalware (ai score=81)
ArcabitTrojan.Fugrafa.D3EFB8
MicrosoftTrojanDownloader:Win32/Emotet!ml
CynetMalicious (score: 99)
AhnLab-V3Malware/Win.Reputation.R496203
Acronissuspicious
VBA32BScope.Trojan.Occamy
ALYacGen:Variant.Fugrafa.257976
TACHYONTrojan/W32.Fugrafa.26112
MalwarebytesMalware.AI.2397151589
APEXMalicious
RisingTrojan.PSW!1.DE3E (CLASSIC)
IkarusTrojan.DelFiles
MaxSecureTrojan.Malware.5437263.susgen
FortinetW32/SelfDef.26C0!tr
AVGWin32:Malware-gen
Cybereasonmalicious.b7ed04
PandaTrj/Genetic.gen

How to remove Fugrafa.257976 (B)?

Fugrafa.257976 (B) removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment