Categories: Malware

Graftor.676615 malicious file

The Graftor.676615 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Graftor.676615 virus can do?

Attempts to connect to a dead IP:Port (1 unique times)
Presents an Authenticode digital signature
Repeatedly searches for a not-found process, may want to run with startbrowser=1 option
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
The binary likely contains encrypted or compressed data.
Queries information on disks, possibly for anti-virtualization
Attempts to modify proxy settings

Related domains:

api.ip138.com

down.xiald.com

down.popodi.com

ab.popodi.com

52740.png

How to determine Graftor.676615?


File Info:
crc32: 3C60239Emd5: f4c135efea1926c61de14338b3d25503name: 25c625c125c425bb25c225bc25-19-52740appjv.exesha1: 660f65c432d1f068c89768377b374dc15e2cad5dsha256: 0ba84cad39d9d7b12fb17c9f318a004368b096eb8897a184c082cccff9c03727sha512: e9cbc12ecb024cb35532bcf611456fa87d193dd64b5581e08f0f2913cd29276f882bdec24262f7c662f023b3860694fe1537ff84ce521f6cb77832c39557d109ssdeep: 49152:x30WcdFBDGzpI92ArEDPuetadb7uEHWA3Zw+:xkWO9GzpI2Tueta9mAFtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
LegalCopyright: Copyright (C) 2018InternalName: x9ad8x901fx4e0bx8f7dx5668FileVersion: 1.2.5.19117CompanyName: x9ad8x901fx4e0bx8f7dx5668ProductName: x9ad8x901fx4e0bx8f7dx5668ProductVersion: 1,2,5,19117FileDescription: x9ad8x901fx4e0bx8f7dx5668OriginalFilename: Install.exeTranslation: 0x0804 0x04b0

Graftor.676615 also known as:

Bkav	W32.AIDetectVM.malware2
MicroWorld-eScan	Gen:Variant.Graftor.676615
FireEye	Gen:Variant.Graftor.676615
CAT-QuickHeal	Trojan.Mauvaise.SL1
ALYac	Gen:Variant.Graftor.676615
Malwarebytes	PUP.Optional.Softcnapp
VIPRE	Trojan.Win32.Generic!BT
AegisLab	Trojan.Win32.Generic.4!c
Sangfor	Malware
K7AntiVirus	Adware ( 004d97001 )
BitDefender	Gen:Variant.Graftor.676615
K7GW	Adware ( 004d97001 )
TrendMicro	TROJ_GEN.R007C0PJ819
Cyren	W32/Trojan.YXTV-8277
Symantec	ML.Attribute.HighConfidence
TrendMicro-HouseCall	TROJ_GEN.R007C0PJ819
Paloalto	generic.ml
Kaspersky	HEUR:Trojan.Win32.Generic
ViRobot	Adware.Softcnapp.1953080.B
Tencent	Win32.Trojan.Generic.Eegv
Ad-Aware	Gen:Variant.Graftor.676615
Sophos	Softcnapp (PUA)
Comodo	Malware@#2s8zimuyntskz
DrWeb	Adware.Softcnapp.97
Zillya	Trojan.Generic.Win32.956006
Invincea	heuristic
McAfee-GW-Edition	GenericRXHC-RW!F4C135EFEA19
Emsisoft	Gen:Variant.Graftor.676615 (B)
APEX	Malicious
GData	Gen:Variant.Graftor.676615
Jiangmin	Trojan.APosT.kg
Webroot	W32.Adware.Gen
Microsoft	PUA:Win32/CoinMiner
Endgame	malicious (high confidence)
ZoneAlarm	HEUR:Trojan.Win32.Generic
SentinelOne	DFI – Malicious PE
AhnLab-V3	Malware/RL.Generic.R257946
McAfee	GenericRXHC-RW!F4C135EFEA19
VBA32	BScope.Adware.Puwaders
ESET-NOD32	a variant of Win32/Softcnapp.J potentially unwanted
Rising	PUA.Puamson!8.108E8 (C64:YzY0Ogwm3dDzhWGI)
Ikarus	PUA.Softcnapp
eGambit	Unsafe.AI_Score_97%
Fortinet	Riskware/Softcnapp
Panda	Trj/Genetic.gen
CrowdStrike	win/malicious_confidence_80% (D)
MaxSecure	Trojan.Malware.7164915.susgen