Categories: Malware

Should I remove “Graftor.1148”?

The Graftor.1148 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Graftor.1148 virus can do?

Behavioural detection: Executable code extraction – unpacking
Sample contains Overlay data
Authenticode signature is invalid

How to determine Graftor.1148?


File Info:
name: 23636F7895D902480F48.mlwpath: /opt/CAPEv2/storage/binaries/2ce1ee3125ca3e31805d9681e865094cf1447e5d123d9696c61c658363a7a3c9crc32: BF7C0477md5: 23636f7895d902480f481cb2de93e706sha1: 9feafca04f803f9eb2e59131938a5a35ec568942sha256: 2ce1ee3125ca3e31805d9681e865094cf1447e5d123d9696c61c658363a7a3c9sha512: 9a5e4ea8fe6bdec3af824a7dfafa08c553b032c81837a43fb376fb76d6fc9115bd4cfd5dcfff3127b79780591effa72cf7d3901bc8fe29a5391cd2dd0f700947ssdeep: 12288:JmzKjYo46VX3Ybn11PqILyxfrV7iqVgm2PB9AhUiGWHYyFfFpBW8wxd08KEeOu0x:JmzK8odp3Yb11MUHcgBHKHO7xtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T139160AB976CDF1ABAC436DA29DBFC289C1D0FC36130F5916A514AD61C00C9A4EED3A47sha3_384: ebf9e423870af765c3f35f6d7ba61ccc09b52ee9c1402bcf2ea3c5b5f94f8de30407a64cb17bdeb0e690367985483978ep_bytes: 6864234000e8eeffffff000000000000timestamp: 2011-03-25 01:39:32
Version Info:
Translation: 0x0409 0x04b0Comments: DEBMCIULNCompanyName: FGYUPQKJBFileDescription: NXCMDEQVWProductName: GEHLVOUJLFileVersion: 19.08.0025ProductVersion: 19.08.0025InternalName: dzcpbjuOriginalFilename: dzcpbju.exe

Graftor.1148 also known as:

Bkav	W32.AIDetectMalware
Lionic	Hacktool.Win32.ArchSMS.3!c
MicroWorld-eScan	Gen:Variant.Graftor.1148
FireEye	Generic.mg.23636f7895d90248
McAfee	Artemis!23636F7895D9
Zillya	Trojan.ArchSMS.Win32.31067
Sangfor	Suspicious.Win32.Save.vb
K7AntiVirus	Trojan ( 0055e3991 )
Alibaba	RiskWare:Win32/ArchSMS.1f765110
K7GW	Trojan ( 0055e3991 )
Cybereason	malicious.895d90
BitDefenderTheta	AI:Packer.E5F2031D21
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/Injector.FLW
APEX	Malicious
Paloalto	generic.ml
Cynet	Malicious (score: 100)
Kaspersky	Hoax.Win32.ArchSMS.hjjb
BitDefender	Gen:Variant.Graftor.1148
NANO-Antivirus	Riskware.Win32.ArchSMS.ecjvad
Avast	Win32:VB-SLO [Trj]
Tencent	Malware.Win32.Gencirc.114f7597
Emsisoft	Gen:Variant.Graftor.1148 (B)
F-Secure	Trojan.TR/Dropper.Gen2
DrWeb	Trojan.DownLoader21.41315
VIPRE	Gen:Variant.Graftor.1148
McAfee-GW-Edition	BehavesLike.Win32.Trojan.wm
Trapmine	malicious.high.ml.score
Sophos	Mal/VBCheMan-C
SentinelOne	Static AI – Suspicious PE
GData	Gen:Variant.Graftor.1148
Jiangmin	Hoax.ArchSMS.brcy
Avira	TR/Dropper.Gen2
Antiy-AVL	HackTool[Hoax]/Win32.ArchSMS
Xcitium	Malware@#11m7dk1tcnkvf
Arcabit	Trojan.Graftor.D47C
ViRobot	Trojan.Win32.GandCrab.Gen.A
ZoneAlarm	Hoax.Win32.ArchSMS.hjjb
Microsoft	Trojan:Win32/Wacatac.B!ml
Google	Detected
VBA32	BScope.Trojan-Spy.Zbot
ALYac	Gen:Variant.Graftor.1148
MAX	malware (ai score=99)
Cylance	unsafe
Panda	Generic Malware
Rising	Malware.Undefined!8.C (TFE:4:VYTn4MM3zOF)
Yandex	Trojan.GenAsa!/6KdO7ofnYw
Ikarus	Trojan-Dropper.Win32.VB
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Generic.AC.345267!tr
AVG	Win32:VB-SLO [Trj]
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_100% (W)