Categories: Malware

Graftor.936817 malicious file

The Graftor.936817 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Graftor.936817 virus can do?

Executable code extraction
Unconventionial language used in binary resources: Chinese (Traditional)
Deletes its original binary from disk
Attempts to repeatedly call a single API many times in order to delay analysis time
Creates a copy of itself

How to determine Graftor.936817?


File Info:
crc32: 240A2761md5: d3460cb6924d169843fefc1019f49eb7name: D3460CB6924D169843FEFC1019F49EB7.mlwsha1: 01fc59e7555022664ffedbddb1e7159bd9ebc3f4sha256: 1ae94a167f7ef76891fda0551c8306cb5834e9e89bca30c8a72921d376e0d3e1sha512: b6a6a10d3eb1862fdbefd57d8b2ef5dd0ad4149c82c8a89f3155c6f9ccbcbc85ee8ce7bff4765a74baf3afedf820471717b54185c2f65d1305366c083ee5e8bassdeep: 24576:ZuSEPPYujj7UFKNxzeJk0zogFFuP/cG9bdRXbx1:6jcANwJjzTFacGxdZ/type: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
LegalCopyright: Copyright (C) 2010InternalName: bitmap_bitFileVersion: 1, 0, 0, 1CompanyName: LegalTrademarks: ProductName: bitmap_bit ApplicationProductVersion: 1, 0, 0, 1FileDescription: bitmap_bit MFC ApplicationOriginalFilename: bitmap_bit.EXETranslation: 0x0404 0x04b0

Graftor.936817 also known as:

ALYac	Gen:Variant.Graftor.936817
APEX	Malicious
Avast	Win32:Malware-gen
ClamAV	Win.Malware.Gh0stRAT-7459730-1
Kaspersky	UDS:Backdoor.Win32.Lotok.gen
BitDefender	Gen:Variant.Graftor.936817
MicroWorld-eScan	Gen:Variant.Graftor.936817
Ad-Aware	Gen:Variant.Graftor.936817
McAfee-GW-Edition	BehavesLike.Win32.Injector.tt
FireEye	Gen:Variant.Graftor.936817
Emsisoft	Gen:Variant.Graftor.936817 (B)
SentinelOne	Static AI – Suspicious PE
eGambit	Unsafe.AI_Score_98%
Kingsoft	Win32.Hack.Undef.(kcloud)
AegisLab	Trojan.Win32.Graftor.4!c
GData	Gen:Variant.Graftor.936817
McAfee	Artemis!D3460CB6924D
MAX	malware (ai score=99)
Malwarebytes	Malware.AI.1355446094
Fortinet	W32/PossibleThreat
AVG	Win32:Malware-gen
Paloalto	generic.ml
Qihoo-360	Win32/Heur.Generic.HwIAFVsA