Categories: Malware

What is “Graftor.792656”?

The Graftor.792656 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Graftor.792656 virus can do?

Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
The binary likely contains encrypted or compressed data.
The executable is compressed using UPX
Uses Windows utilities for basic functionality
Deletes its original binary from disk
Unusual version info supplied for binary
Uses suspicious command line tools or Windows utilities

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Graftor.792656?


File Info:
crc32: 71F3644Cmd5: b9407a249ec1ffd90d97bece819cd770name: B9407A249EC1FFD90D97BECE819CD770.mlwsha1: 3086a6a2f90791c5dec75d840713a7a37bc6e568sha256: 9f226615737c9c4b5fe4f9efc967439916c222ded1501432fb21e6de83217c6dsha512: 604468736e03ac8ed1e58ced851d6ce13de02a4fd426ef2d003e7ed79a619aab66732a09df889345e6b6151f9c833cf62c6942a0e75264b207645dbca434e16cssdeep: 12288:jRDY1yW3hVfnMNg6gYmgAcC6faZGQNXVhAk1ZnnLpr:V81yW8XCOQNXVhR9n1rtype: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed
Version Info:
LegalCopyright: Microsoft x66f4x65b0x72ecx7acbx7a0bx5e8fx5305 x5728x7ebfx66f4x65b0x5de5x5177FileVersion: 20.21.5.14CompanyName: BgrcComments: x9002x7528x4e8ewindow10_1903-1909 X64ProductName: x8865x4e01x66f4x65b0 V2.0ProductVersion: 20.21.5.14FileDescription: Microsoft hotfix x4e0bx8f7dx66f4x65b0x7a0bx5e8fTranslation: 0x0804 0x04b0

Graftor.792656 also known as:

Bkav	W32.AIDetect.malware2
K7AntiVirus	Trojan ( 005246d51 )
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
CAT-QuickHeal	Hacktool.Flystudio.16558
ALYac	Gen:Variant.Graftor.792656
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_80% (W)
BitDefender	Gen:Variant.Graftor.792656
K7GW	Trojan ( 005246d51 )
Cybereason	malicious.49ec1f
Cyren	W32/Trojan.CLL.gen!Eldorado
ESET-NOD32	a variant of Win32/Packed.FlyStudio.AA potentially unwanted
APEX	Malicious
ClamAV	Win.Malware.Zusy-6809753-0
MicroWorld-eScan	Gen:Variant.Graftor.792656
Ad-Aware	Gen:Variant.Graftor.792656
Sophos	Generic PUA DA (PUA)
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	BehavesLike.Win32.Generic.gc
FireEye	Generic.mg.b9407a249ec1ffd9
Emsisoft	Gen:Variant.Graftor.792656 (B)
SentinelOne	Static AI – Malicious PE
eGambit	Unsafe.AI_Score_100%
Microsoft	Program:Win32/Wacapew.C!ml
Arcabit	Trojan.Graftor.DC1850
AegisLab	Trojan.Win32.Graftor.4!c
GData	Gen:Variant.Graftor.792656
Acronis	suspicious
McAfee	Artemis!B9407A249EC1
MAX	malware (ai score=89)
TrendMicro-HouseCall	TROJ_GEN.R002H09EE21
Ikarus	Trojan.Win32.CoinMiner
Fortinet	Riskware/Application
Paloalto	generic.ml