Malware

Graftor.737425 (file analysis)

Malware Removal

The Graftor.737425 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Graftor.737425 virus can do?

  • Sample contains Overlay data
  • Authenticode signature is invalid
  • Anomalous binary characteristics

How to determine Graftor.737425?


File Info:

name: 1159206C9B0E932B0E5E.mlw
path: /opt/CAPEv2/storage/binaries/db11c73e4f70744f44e65a092018082ad92220a9bd880fa6e5c742574595068a
crc32: 3BB0B0C5
md5: 1159206c9b0e932b0e5e23f57a623642
sha1: 438e437cede3e2df7e79e4f7355aaaf3d4375b9d
sha256: db11c73e4f70744f44e65a092018082ad92220a9bd880fa6e5c742574595068a
sha512: fc1c05046ab88db1a90d1e723a9b8c4a545c31a1b82882726ca8685fdc5b4f74f0e30ee393043732de8d3d33fe428b37b70c963f9ef1a87c359f3c051d318856
ssdeep: 6144:D5r+sqEBkEnQgxzu/GTQRl+ZNclpNZwL9POeSViTVN/xvIKsAHp:D51XnClsNcnNZwZPOeSg6KsA
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1D7F49E127280C039E3AA13314957E6F419687E345AA4968FF7A87E791F312D39A3734F
sha3_384: de7b16b6ac5cfd1c19bc7a068d0bce138b9a45e5ad21565f1aecbe6536cbe2e8e6801edbf1140ab60e34a57a09da1ea2
ep_bytes: 8ef489448ff48b448ef889448ff88b44
timestamp: 2013-10-21 10:49:43

Version Info:

0: [No Data]

Graftor.737425 also known as:

BkavW32.AIDetect.malware2
LionicTrojan.Win32.Generic.lN4Z
MicroWorld-eScanGen:Variant.Graftor.737425
ClamAVWin.Malware.Urelas-9863836-0
FireEyeGeneric.mg.1159206c9b0e932b
ALYacGen:Variant.Graftor.737425
Cylanceunsafe
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_90% (W)
AlibabaTrojanPSW:Win32/Generic.b5cfde44
BaiduWin32.Trojan.Urelas.d
CyrenW32/Agent.FWJ.gen!Eldorado
SymantecML.Attribute.HighConfidence
Elasticmalicious (high confidence)
APEXMalicious
CynetMalicious (score: 100)
BitDefenderGen:Variant.Graftor.737425
AvastWin32:Malware-gen
TencentTrojan.Win32.CardSpy.16000130
SophosGeneric Reputation PUA (PUA)
F-SecureTrojan.TR/Rogue.9855981
DrWebTrojan.PWS.Stealer.3535
VIPREGen:Variant.Graftor.737425
TrendMicroTROJ_GEN.R03BC0PDO23
McAfee-GW-EditionBehavesLike.Win32.Generic.bt
EmsisoftGen:Variant.Graftor.737425 (B)
IkarusTrojan.Crypt
GDataWin32.Trojan.PSE.102K66A
AviraHEUR/AGEN.1352898
Antiy-AVLTrojan/Win32.Tgenic
XcitiumTrojWare.Win32.Wecod.AH@53dlo9
ArcabitTrojan.Graftor.DB4091
MicrosoftTrojan:Win32/Wacatac.B!ml
GoogleDetected
AhnLab-V3Backdoor/Win32.Plite.R85659
McAfeeArtemis!1159206C9B0E
MAXmalware (ai score=88)
MalwarebytesCardSpy.Spyware.Stealer.DDS
PandaTrj/Genetic.gen
TrendMicro-HouseCallTROJ_GEN.R03BC0PDO23
RisingSpyware.CardSpy!1.A1A8 (CLASSIC)
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/CardSpy.PRKJ!tr
BitDefenderThetaGen:NN.ZexaE.36164.TuZ@aWBRNff
AVGWin32:Malware-gen
DeepInstinctMALICIOUS

How to remove Graftor.737425?

Graftor.737425 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment