Categories: Malware

Graftor.512282 (file analysis)

The Graftor.512282 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Graftor.512282 virus can do?

Executable code extraction
Drops a binary and executes it
The binary likely contains encrypted or compressed data.
The executable is compressed using UPX
Uses Windows utilities for basic functionality
Sniffs keystrokes
Deletes its original binary from disk
Attempts to repeatedly call a single API many times in order to delay analysis time
Installs itself for autorun at Windows startup
Creates a copy of itself
Uses suspicious command line tools or Windows utilities

Related domains:

pcwap.zzyumi.com

How to determine Graftor.512282?


File Info:
crc32: 8E40B447md5: 635611d82b96ba5cf3fe71ba5a6be2f6name: ccav.exesha1: efd3982ff7b8f3052d2ea08b3768fe181fba356esha256: 028702b0601e077f244246c4e6fd11cca80c8f9d6c47666bd752d79459f695c1sha512: 5ec3087d3bbf10e3cf681522366ecc099d68773fb7c83023f031c6f96ebecae0447157d4e49fcb34711f65afa0a2fc333c33daa3e25c87e81da5a17f5cdb1eeassdeep: 1536:8rfsSdEfauoCgEalDjZV/yJnSk6kIukkhaHcFTp3oiFxRTtU7VbySSDsqAJwqeC:8rESmf4lxVKngudYiFNobSws2Ptype: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed
Version Info:
0: [No Data]

Graftor.512282 also known as:

MicroWorld-eScan	Gen:Variant.Graftor.512282
FireEye	Generic.mg.635611d82b96ba5c
Qihoo-360	Win32/Backdoor.Agent.ADM
McAfee	Artemis!635611D82B96
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
Sangfor	Malware
K7AntiVirus	Trojan ( 004fbf8e1 )
BitDefender	Gen:Variant.Graftor.512282
K7GW	Trojan ( 004fbf8e1 )
Cybereason	malicious.82b96b
TrendMicro	BKDR_ZEGOST.SM34
Symantec	Backdoor.Zegost
APEX	Malicious
Avast	Win32:Adware-gen [Adw]
ClamAV	Win.Dropper.Gh0stRAT-7445107-0
GData	Gen:Variant.Graftor.512282
Kaspersky	Backdoor.Win32.Farfli.bquq
Alibaba	Backdoor:Win32/Shellex.190111
NANO-Antivirus	Trojan.Win32.Kryptik.epntbq
ViRobot	Trojan.Win32.Z.Graftor.92160.C
AegisLab	Trojan.Win32.Farfli.m!c
Tencent	Win32.Backdoor.Farfli.Wmss
Endgame	malicious (moderate confidence)
Emsisoft	Gen:Variant.Graftor.512282 (B)
Comodo	Backdoor.Win32.Farfli.FHH@7ok41s
F-Secure	Trojan.TR/Dropper.Gen
DrWeb	Trojan.Hottrend.627
Invincea	heuristic
McAfee-GW-Edition	BehavesLike.Win32.Sdbot.nc
Trapmine	malicious.high.ml.score
Sophos	Mal/Generic-S
Ikarus	Trojan.Win32.Farfli
Jiangmin	Trojan.Generic.wfzk
Avira	TR/Dropper.Gen
Antiy-AVL	Trojan/Win32.SGeneric
Arcabit	Trojan.Graftor.D7D11A
ZoneAlarm	Backdoor.Win32.Farfli.bquq
Microsoft	Trojan:Win32/Zegost.CJ!bit
VBA32	Trojan.Hottrend
ALYac	Gen:Variant.Graftor.512282
MAX	malware (ai score=85)
Ad-Aware	Gen:Variant.Graftor.512282
ESET-NOD32	a variant of Win32/Kryptik.FHSE
TrendMicro-HouseCall	BKDR_ZEGOST.SM34
Rising	Trojan.Kryptik!1.AAD1 (CLOUD)
Yandex	Backdoor.Farfli!UjHPXvhLOHQ
SentinelOne	DFI – Malicious PE
eGambit	Unsafe.AI_Score_99%
Fortinet	W32/GenKryptik.BJAB!tr
BitDefenderTheta	Gen:NN.ZexaF.34100.fmGfaOUcfyn
AVG	Win32:Adware-gen [Adw]
Paloalto	generic.ml
CrowdStrike	win/malicious_confidence_60% (W)
MaxSecure	Trojan.Malware.73422420.susgen