Malware

What is “Fugrafa.5486”?

Malware Removal

The Fugrafa.5486 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Fugrafa.5486 virus can do?

  • Dynamic (imported) function loading detected
  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid
  • Attempts to identify installed AV products by installation directory
  • Anomalous binary characteristics

How to determine Fugrafa.5486?


File Info:

name: 5502C51D27582E2A783F.mlw
path: /opt/CAPEv2/storage/binaries/3f17844bc7ba777b455d574bb2f19f79b07cae5e0a88c38cf2576f4c09850a36
crc32: B164392D
md5: 5502c51d27582e2a783f30ab708aa087
sha1: b0f7b5727aa845251314d10ea4a1adab2b744b93
sha256: 3f17844bc7ba777b455d574bb2f19f79b07cae5e0a88c38cf2576f4c09850a36
sha512: 14e9adca186203ed67ad6ed9629f8ad3237c1e91eb539044803fc126cd0da38abd6a7e2ada40061e654ab9bb9cb24624f5899ae26176c8e1656c1c4cbe5a0f27
ssdeep: 1536:u+qQxQrzttUsaQizfzdlQ6RiUElAZE1/HDz021EQ8ycVgUU:vxuzQIOrd264/7Zf021H5xUU
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T10C936A23F9C184B3E1B50B7C4D0AB6B5946BFD213E291D1BB6E80E0E5D2D2819E5D2D3
sha3_384: 45b32d20ac6e246aac53aceda65795bc7345f17c17935c96927d231bbd5801aa8655c4eb409d7885139f5feabe9226fa
ep_bytes: 558becb92a0000006a006a004975f951
timestamp: 1992-06-19 22:22:17

Version Info:

0: [No Data]

Fugrafa.5486 also known as:

LionicTrojan.Win32.Generic.4!c
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.Fugrafa.5486
FireEyeGeneric.mg.5502c51d27582e2a
McAfeeTrojan-FLDW!5502C51D2758
K7AntiVirusTrojan-Downloader ( 00509ea81 )
K7GWTrojan-Downloader ( 00509ea81 )
Cybereasonmalicious.d27582
BitDefenderThetaAI:Packer.CEC72E7021
CyrenW32/Banload.JHBW-5654
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/TrojanDownloader.Banload.XWP
TrendMicro-HouseCallTROJ_BANLOAD_GD04005A.UVPM
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderGen:Variant.Fugrafa.5486
AvastWin32:Trojan-gen
RisingSpyware.Banker!1.ABA2 (CLASSIC)
Ad-AwareGen:Variant.Fugrafa.5486
ComodoTrojWare.Win32.Delf.TQW@76p66c
TrendMicroTROJ_BANLOAD_GD04005A.UVPM
McAfee-GW-EditionBehavesLike.Win32.Generic.nh
SentinelOneStatic AI – Suspicious PE
EmsisoftGen:Variant.Fugrafa.5486 (B)
IkarusTrojan-Downloader.Win32.Banload
AviraHEUR/AGEN.1117113
Antiy-AVLTrojan/Generic.ASMalwS.1F1E24B
MicrosoftTrojanDownloader:Win32/Banload
GDataGen:Variant.Fugrafa.5486
CynetMalicious (score: 99)
AhnLab-V3Malware/Win32.Generic.C1882991
ALYacGen:Variant.Fugrafa.5486
VBA32TScope.Trojan.Delf
MalwarebytesMalware.AI.4112224350
APEXMalicious
TencentTrojan.Win32.BitCoinMiner.la
YandexTrojan.GenAsa!D15Nhws7dEg
MAXmalware (ai score=89)
FortinetW32/Banload.XWN!tr
AVGWin32:Trojan-gen
PandaTrj/GdSda.A

How to remove Fugrafa.5486?

Fugrafa.5486 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment