Categories: Malware

What is “Fugrafa.28845”?

The Fugrafa.28845 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Fugrafa.28845 virus can do?

Yara rule detections observed from a process memory dump/dropped files/CAPE
Drops a binary and executes it
Authenticode signature is invalid
Uses Windows utilities for basic functionality
Creates a copy of itself
Deletes executed files from disk

How to determine Fugrafa.28845?


File Info:
name: 03AF5E2794A8F76EFEBE.mlwpath: /opt/CAPEv2/storage/binaries/5d5bdbeebfe7a5f9c4f54f0ad4230c8d2b1a1a01dfc766e58c3e7d04d3ec8839crc32: 777D272Fmd5: 03af5e2794a8f76efebe7e6488a30ab2sha1: 21d1cd08075ea9ae009805241923d41636d0ddb5sha256: 5d5bdbeebfe7a5f9c4f54f0ad4230c8d2b1a1a01dfc766e58c3e7d04d3ec8839sha512: 3cd83ea4402c78118da4b3534c056c1e622afe2d7b0d2927021ddb5439c29ec86eee2e2e71b2aa987d0c78b1f45603be2e7de4e9a2d19f2c58863dbd8286d08essdeep: 3072:BeJA3yUFB9/73DWSagR+IkiquVw/CaQtqD+P5o5z24:8JAZLD3KSaaFoCODky/type: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T14B144C30A6A1C034F0F705B68AFA8BB8BD397D701B7884CB53C4179A1664AE9DD31B57sha3_384: 3352b844ddb8d77a42d778672933968a53c39d0fd0519e4a24177562e4b023a63ecc9f937c68c43af02176cb30ee8a0eep_bytes: 558bece818610000e8a3fdffff5dc3cctimestamp: 2014-09-25 14:21:07
Version Info:
0: [No Data]

Fugrafa.28845 also known as:

Lionic	Trojan.Win32.Bugor.trZ9
DrWeb	Trojan.DownLoad3.37956
MicroWorld-eScan	Gen:Variant.Fugrafa.28845
FireEye	Generic.mg.03af5e2794a8f76e
McAfee	GenericRXHP-WH!03AF5E2794A8
Cylance	Unsafe
Zillya	Downloader.Agent.Win32.260069
Sangfor	Trojan.Win32.Bugor.ai
K7AntiVirus	Riskware ( 0040eff71 )
Alibaba	TrojanDropper:Win32/Bugor.827e582e
K7GW	Riskware ( 0040eff71 )
Cybereason	malicious.794a8f
BitDefenderTheta	Gen:NN.ZexaF.34754.muW@aOn@bhpi
VirIT	Trojan.Win32.Generic.BRFU
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/TrojanDropper.Agent.RCV
APEX	Malicious
Kaspersky	Trojan.Win32.Bugor.ai
BitDefender	Gen:Variant.Fugrafa.28845
NANO-Antivirus	Trojan.Win32.DownLoad3.dtrgfr
Avast	Win32:Malware-gen
Tencent	Malware.Win32.Gencirc.10c7f8b8
Ad-Aware	Gen:Variant.Fugrafa.28845
Emsisoft	Gen:Variant.Fugrafa.28845 (B)
Comodo	Malware@#2sgfqbj0sepph
F-Secure	Trojan.TR/Agent.198656.90
VIPRE	Gen:Variant.Fugrafa.28845
McAfee-GW-Edition	GenericRXHP-WH!03AF5E2794A8
Trapmine	malicious.high.ml.score
Sophos	Mal/Generic-S
GData	Gen:Variant.Fugrafa.28845
Jiangmin	Trojan/Bugor.a
Webroot	W32.Trojan.Gen
Google	Detected
Avira	TR/Agent.198656.90
MAX	malware (ai score=100)
Antiy-AVL	Trojan[Downloader]/Win32.Agent
Kingsoft	Win32.Troj.Bugor.ai.(kcloud)
Arcabit	Trojan.Fugrafa.D70AD
SUPERAntiSpyware	Trojan.Agent/Gen-Downloader
ZoneAlarm	Trojan.Win32.Bugor.ai
Microsoft	Trojan:Win32/Skeeyah.A!bit
Cynet	Malicious (score: 100)
VBA32	TrojanDownloader.Agent
ALYac	Gen:Variant.Fugrafa.28845
TACHYON	Trojan/W32.Bugor.198656
Malwarebytes	Generic.Malware/Suspicious
Rising	Trojan.Hitbrovi!8.2DCC (TFE:5:UyJaOU5ResO)
Yandex	Trojan.DL.Agent!Bm9JaSg+bsg
Ikarus	Trojan-Dropper.Win32.Agent
Fortinet	W32/Generic.AC.1F4230!tr
AVG	Win32:Malware-gen
Panda	Trj/Genetic.gen