Categories: Malware

What is “Graftor.785298”?

The Graftor.785298 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Graftor.785298 virus can do?

Executable code extraction
Creates RWX memory
Reads data out of its own binary image
Drops a binary and executes it

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Graftor.785298?


File Info:
crc32: 38394B99md5: 9d4fc17740740d14a72340d5c9f63a73name: ch.jpegsha1: a7c5a7fae7f04fff6d6b90f112c0bbb2df13a9f4sha256: 619f965e6d79d69a7a99f826b1113b133dc81445b205f1fa3724d575e965c2b6sha512: 63b8b6ff45e7299e0b1e2392c5fecb869555cd2dc2d1790ceca96fd9778622c522fb2834318f3717d1e2aa47f04b22ea52e2ad6ad31e771a2b0cea64afe2ec9dssdeep: 24576:ANA3R5drXPrf/hamnYoia5z16qrh4bXG0RegKECYkev:55jom9hz13tWjRegWYtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
0: [No Data]

Graftor.785298 also known as:

MicroWorld-eScan	Gen:Variant.Graftor.785298
BitDefender	Gen:Variant.Graftor.785298
Arcabit	Trojan.Graftor.DBFB92
TrendMicro	TROJ_FRS.0NA104FT20
Cyren	W32/Trojan.PRJH-1337
ESET-NOD32	a variant of Win32/Injector.EMNC
APEX	Malicious
Kaspersky	HEUR:Exploit.Win32.BypassUAC.gen
Emsisoft	Gen:Variant.Graftor.785298 (B)
F-Secure	Trojan.TR/Injector.cevlj
DrWeb	Trojan.Siggen9.56402
Invincea	heuristic
Fortinet	W32/GenKryptik.EKLE!tr
FireEye	Generic.mg.9d4fc17740740d14
Ikarus	Trojan.Win32.Injector
Avira	Cdrbjxe.exe
MAX	malware (ai score=87)
Antiy-AVL	Trojan[Exploit]/Win32.BypassUAC
Endgame	malicious (high confidence)
Microsoft	Trojan:Win32/Wacatac.D6!ml
ZoneAlarm	HEUR:Exploit.Win32.BypassUAC.gen
BitDefenderTheta	Gen:NN.ZelphiF.34130.@GW@aOfamDki
VBA32	BScope.Backdoor.Remcos
Zoner	Trojan.Win32.91048
TrendMicro-HouseCall	TROJ_FRS.0NA104FT20
Rising	Trojan.Kryptik!1.C56D (CLOUD)
MaxSecure	Trojan.Malware.300983.susgen
GData	Gen:Variant.Graftor.785298
AVG	Win32:RansomX-gen [Ransom]
Avast	Win32:RansomX-gen [Ransom]