Categories: Malware

Graftor.535737 (file analysis)

The Graftor.535737 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Graftor.535737 virus can do?

Possible date expiration check, exits too soon after checking local time
A process created a hidden window
Drops a binary and executes it
The binary likely contains encrypted or compressed data.
The executable is compressed using UPX
Uses Windows utilities for basic functionality
Network activity detected but not expressed in API logs

How to determine Graftor.535737?


File Info:
crc32: 738F53D1md5: 03d11e8016a7e7cf17908c56b63386c1name: 03D11E8016A7E7CF17908C56B63386C1.mlwsha1: 28ad1adde4e5e35b4129f8b44505eb3fef420706sha256: 5b9059e9cb5a2d855e3fbd569fdd37a9c52e8dc1c1357f267db65ce1c7095552sha512: 5323c58ac34d5eb07799dabc42c374faef9ad2cecf1bfc859667652ca302150ae5aa8e4c1ede215451e4634be6e3e7b093e7f87aa27d56a3cf5a6b22d71adc06ssdeep: 12288:COD9bHl0X/3OKSm2HNCjQgg+1wZkrIn4AnxLGBCol/L4WlL2oSgO63Va:5bku1EPKZznx6B3lk4rN3Vatype: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed
Version Info:
0: [No Data]

Graftor.535737 also known as:

Bkav	W32.AIDetect.malware1
Lionic	Trojan.Win32.Symmi.4!c
ALYac	Gen:Variant.Graftor.535737
Cylance	Unsafe
Sangfor	Suspicious.Win32.Save.a
BitDefender	Gen:Variant.Graftor.535737
Cybereason	malicious.016a7e
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/HackTool.Patcher.DE potentially unsafe
APEX	Malicious
Cynet	Malicious (score: 100)
Alibaba	HackTool:Win32/Patcher.2088958e
NANO-Antivirus	Trojan.Win32.Agent.emmnfo
MicroWorld-eScan	Gen:Variant.Graftor.535737
Ad-Aware	Gen:Variant.Graftor.535737
Sophos	Generic ML PUA (PUA)
BitDefenderTheta	Gen:NN.ZelphiF.34170.omGfaO@JEVo
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	BehavesLike.Win32.Generic.bc
FireEye	Generic.mg.03d11e8016a7e7cf
Emsisoft	Trojan.FileCoder (A)
SentinelOne	Static AI – Malicious PE
Jiangmin	RiskTool.BitCoinMiner.bmt
Antiy-AVL	Trojan/Generic.ASMalwS.1E411E1
Kingsoft	Win32.Troj.Generic_a.a.(kcloud)
Microsoft	Trojan:Win32/Wacatac.A!ml
SUPERAntiSpyware	Trojan.Agent/Gen-Downloader
GData	Gen:Variant.Graftor.535737 (2x)
McAfee	Artemis!03D11E8016A7
MAX	malware (ai score=99)
VBA32	BScope.Trojan.Bitrep
Yandex	Trojan.GenAsa!EjX42yauZdE
Fortinet	Riskware/Patcher
Paloalto	generic.ml