Categories: Malware

Graftor.721460 malicious file

The Graftor.721460 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Graftor.721460 virus can do?

Executable code extraction
Creates RWX memory
Repeatedly searches for a not-found process, may want to run with startbrowser=1 option
Reads data out of its own binary image
Attempts to delete volume shadow copies
Installs itself for autorun at Windows startup
Exhibits possible ransomware file modification behavior
Creates a hidden or system file
Creates a copy of itself
Uses suspicious command line tools or Windows utilities

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Graftor.721460?


File Info:
crc32: 28F19F8Bmd5: d0b0abcc7da57a45754dc51f82b895b9name: D0B0ABCC7DA57A45754DC51F82B895B9.mlwsha1: 083c1f07e0402262a9fa89842b0e23830baf3411sha256: 5eed0a3f19bc534676261103f79423a9df962d7734d284d3925733b6eefa5e81sha512: b4654c646e6e465ceb4336bd1f3002bbd2d347ad6cf87d7dcedfb1d051839e58695c57e271061b57107af35374f017badaeb56dd43a3a54e92a0ec7f14b9e27fssdeep: 24576:Ay9MHihqN5G2+Q5JJss/aZuW22yfA2xXezKZCfR3aAglyTY/imvWM5TXcylGK3x:vjK9im+M5TXcyEK3xXtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
LegalCopyright: O&K Software Ltd. 2006-2014 (c)InternalName: Gender        countbygender RemainFileVersion: 7.7.9.5CompanyName: O&K Software Ltd.PrivateBuild: 7.7.9.5LegalTrademarks: O&K Software Ltd. 2006-2014 (c)ProductName: Gender countbygender RemainLanguages: EnglishProductVersion: 7.7.9.5FileDescription: Repackage Synchandler Vserver Elevated GetdinnersOriginalFilename: Gender    countbygender RemainTranslation: 0x0409 0x04b0

Graftor.721460 also known as:

K7AntiVirus	Trojan ( 005631871 )
Lionic	Trojan.Win32.Dropback.b!c
Elastic	malicious (high confidence)
DrWeb	Trojan.MulDrop11.51565
ALYac	Gen:Variant.Graftor.721460
Cylance	Unsafe
Zillya	Trojan.Kryptik.Win32.1966082
Sangfor	Trojan.Win32.Occamy.C
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	TrojanDropper:Win32/Dropback.1f73fbbe
K7GW	Trojan ( 005631871 )
Cybereason	malicious.c7da57
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Kryptik.HCDN
APEX	Malicious
Avast	Win32:Trojan-gen
Kaspersky	Trojan-Dropper.Win32.Dropback.ji
BitDefender	Gen:Variant.Graftor.721460
NANO-Antivirus	Trojan.Win32.Dropback.hghgox
MicroWorld-eScan	Gen:Variant.Graftor.721460
Tencent	Win32.Trojan-dropper.Dropback.Wqmi
Ad-Aware	Gen:Variant.Graftor.721460
Sophos	Mal/Generic-S
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	Mal_HPGen-37b
McAfee-GW-Edition	BehavesLike.Win32.Dropper.th
FireEye	Gen:Variant.Graftor.721460
Emsisoft	Gen:Variant.Graftor.721460 (B)
Webroot	W32.Trojan.Gen
Avira	TR/AD.Crysis.paztv
Antiy-AVL	Trojan/Generic.ASMalwS.3021430
Microsoft	Trojan:Win32/Occamy.C
GData	Gen:Variant.Graftor.721460
McAfee	GenericRXKD-YD!D0B0ABCC7DA5
MAX	malware (ai score=88)
VBA32	TrojanDropper.Dropback
Panda	Trj/CI.A
TrendMicro-HouseCall	Mal_HPGen-37b
Yandex	Trojan.Kryptik!UQ+eiHIYaUY
Ikarus	Trojan-Spy.Remcos
Fortinet	W32/Dropback.HCDN!tr.ransom
AVG	Win32:Trojan-gen
Paloalto	generic.ml