Categories: Malware

About “Graftor.827109” infection

The Graftor.827109 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Graftor.827109 virus can do?

Creates RWX memory
Dynamic (imported) function loading detected
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
Installs itself for autorun at Windows startup

How to determine Graftor.827109?


File Info:
name: 3FCE4AD82C98BAE3AB41.mlwpath: /opt/CAPEv2/storage/binaries/a8165cd1897fb079969647c6de10c2489e5b8822e0f9f5643f855d4e5746353ecrc32: 9A9E5E87md5: 3fce4ad82c98bae3ab412d2aebab0aadsha1: ad903c5aef5bf31629bd2680cc0bb83f9bd14509sha256: a8165cd1897fb079969647c6de10c2489e5b8822e0f9f5643f855d4e5746353esha512: bf332b19a0fa3e6a1ce7d6ee7e9c010b0c18cfe767a1c7d0209cb0673506f8fe392d68adf3c3ddd5ca0947d9165ecb97b1a564c51cbd8a1ba9d7fe7ad33b92f5ssdeep: 12288:NRk/budCNBMxRQV/PLFbApJieCvzvMdRvvEwOf90k9u:NiyogszGXieCYdRHEd0k9type: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T117F48E37F2E08477D17A1B3C9C3B97A598397E101D38554E3BE82E4D8F3569239262A3sha3_384: ce05f3c0d1b7b2332ddad2f6778c5a5eacc1463defb460b1f345105ee71a9419bd5b0ab2df22663ac7d3beeb3645ee50ep_bytes: 558bec83c4f0b8f8a14700e844c7f8fftimestamp: 1992-06-19 22:22:17
Version Info:
CompanyName: Abzinomics TechnologiesFileDescription: FileVersion: 7.3.2.0InternalName: ssrcvggrLegalCopyright: Abzinomics Technologies ,All right reserved©2011LegalTrademarks: OriginalFilename: ssrcvggr.exeProductName: ProductVersion: 7.3.2.0Translation: 0x041f 0x04e6

Graftor.827109 also known as:

Bkav	W32.AIDetect.malware2
MicroWorld-eScan	Gen:Variant.Graftor.827109
FireEye	Gen:Variant.Graftor.827109
ALYac	Gen:Variant.Graftor.827109
Cylance	Unsafe
VIPRE	Gen:Variant.Graftor.827109
Sangfor	Trojan.Win32.Biodata.co
K7AntiVirus	Riskware ( 0040eff71 )
Alibaba	TrojanDownloader:Win32/Biodata.a787be0f
K7GW	Riskware ( 0040eff71 )
Cybereason	malicious.82c98b
VirIT	Trojan.Win32.Dnldr25.BWNL
Cyren	W32/Delf.TLRU-1843
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/TrojanDownloader.Delf.SOY
APEX	Malicious
Paloalto	generic.ml
ClamAV	Win.Downloader.DelphiDownloader-6609388-1
Kaspersky	Trojan.Win32.Biodata.co
BitDefender	Gen:Variant.Graftor.827109
NANO-Antivirus	Trojan.Win32.Biodata.fbxikg
Avast	FileRepMalware [Trj]
Tencent	Malware.Win32.Gencirc.1201d6cd
Ad-Aware	Gen:Variant.Graftor.827109
Emsisoft	Gen:Variant.Graftor.827109 (B)
Comodo	Malware@#32a0g6bxqtrl
DrWeb	Trojan.DownLoader25.32797
Zillya	Trojan.Biodata.Win32.18
TrendMicro	BKDR_DELF.XXVR
McAfee-GW-Edition	BehavesLike.Win32.Dropper.bh
Sophos	Mal/Generic-S
Ikarus	Trojan-Downloader.Win32.Delf
GData	Gen:Variant.Graftor.827109
Avira	HEUR/AGEN.1214490
Antiy-AVL	Trojan/Generic.ASMalwS.4A8C
Kingsoft	Win32.Troj.Biodata.co.(kcloud)
Microsoft	Trojan:Win32/Occamy.CA8
Cynet	Malicious (score: 99)
AhnLab-V3	Trojan/Win32.Biodata.C2510179
McAfee	Artemis!3FCE4AD82C98
MAX	malware (ai score=100)
VBA32	Trojan.Biodata
TrendMicro-HouseCall	BKDR_DELF.XXVR
Rising	Downloader.Delf!8.16F (CLOUD)
Yandex	Trojan.GenAsa!cbDMOBHKZCc
SentinelOne	Static AI – Suspicious PE
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Biodata.CO!tr
BitDefenderTheta	AI:Packer.3F23949F21
AVG	FileRepMalware [Trj]
Panda	Trj/GdSda.A
CrowdStrike	win/malicious_confidence_60% (W)