Categories: Malware

What is “Graftor.497881”?

The Graftor.497881 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Graftor.497881 virus can do?

Sample contains Overlay data
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Graftor.497881?


File Info:
name: E9B9C8477D49D1B7BD6F.mlwpath: /opt/CAPEv2/storage/binaries/b7c5f1da6accad0e46cbaaf11e64575af1eedecc38ef822db75a4f54f98a3724crc32: 9B095034md5: e9b9c8477d49d1b7bd6fd0761836eecdsha1: 099c9aae354f99078d97b3ca49f95a2a0b2519ccsha256: b7c5f1da6accad0e46cbaaf11e64575af1eedecc38ef822db75a4f54f98a3724sha512: bcbfc64400359f5e3217d4d310c83e44f85bee715b1d318fc8499beee591c9f4ff9fd237aa395c71457745d96aadb93d11caacb0cfbf63afd6d6e6fd7119922cssdeep: 49152:oGtB9RElHxTFzLZ7asOm7azM0febK5XlaxYw:XtWlRFpm49QXlAYwtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T143952306B656C775C0BB3232A8529AF9377B97221625140BD788036E9F306D4CBFB25Bsha3_384: c9e41dd305e34de0a2eb6d9920bbb343903c317044e0c7c13fa1b42008038e2f14a7ba249aa5e184379d1296b85acb69ep_bytes: 6a5868507f4100e82215000033f68975timestamp: 1970-01-01 00:00:00
Version Info:
0: [No Data]

Graftor.497881 also known as:

Bkav	W32.FamVT.RsLpTTc.Worm
tehtris	Generic.Malware
DrWeb	Trojan.Click2.50933
MicroWorld-eScan	Gen:Variant.Graftor.497881
FireEye	Generic.mg.e9b9c8477d49d1b7
CAT-QuickHeal	Ransom.Lyposit.S3755
McAfee	GenericRXAG-XO!E9B9C8477D49
Malwarebytes	Generic.Malware.AI.DDS
Zillya	Trojan.Lyposit.Win32.25
Sangfor	Ransom.Win32.Save.a
K7AntiVirus	Trojan ( 004cbc7e1 )
K7GW	Trojan ( 004cbc7e1 )
CrowdStrike	win/malicious_confidence_100% (W)
Arcabit	Trojan.Graftor.D798D9
BitDefenderTheta	Gen:NN.ZexaF.36318.4jZ@aCKlxC
VirIT	Trojan.Win32.Click2.CXIZ
Cyren	W32/SuspPack.AB.gen!Eldorado
Symantec	Backdoor.Korplug
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/Lyposit.A
APEX	Malicious
ClamAV	Win.Malware.Lyposit-9843926-0
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Gen:Variant.Graftor.497881
NANO-Antivirus	Trojan.Win32.Clicker.efvwpu
Avast	Win32:Evo-gen [Trj]
Tencent	Malware.Win32.Gencirc.10b0abcb
Emsisoft	Gen:Variant.Graftor.497881 (B)
F-Secure	Trojan.TR/Dropper.Gen
VIPRE	Gen:Variant.Graftor.497881
McAfee-GW-Edition	BehavesLike.Win32.Generic.tc
Trapmine	malicious.high.ml.score
Sophos	Troj/Lyposit-C
SentinelOne	Static AI – Malicious PE
Google	Detected
Avira	TR/Dropper.Gen
MAX	malware (ai score=100)
Antiy-AVL	Trojan[Ransom]/Win32.Blocker
Xcitium	TrojWare.Win32.Lyposit.C@6tos6b
Microsoft	Trojan:Win32/Vindor!pz
ZoneAlarm	HEUR:Trojan.Win32.Generic
GData	Gen:Variant.Graftor.497881
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win32.Lyposit.R188188
VBA32	Trojan.Click
ALYac	Gen:Variant.Graftor.497881
Cylance	unsafe
Panda	Trj/Genetic.gen
Rising	Trojan.Agent!1.6645 (CLASSIC)
Yandex	Trojan.GenAsa!+NF32oP7OdY
Ikarus	Trojan-Ransom.Lyposit
MaxSecure	HEUR:Trojan.Win32.Gen
Fortinet	W32/Generic.AP.34DAE6!tr
AVG	Win32:Evo-gen [Trj]
Cybereason	malicious.77d49d
DeepInstinct	MALICIOUS