About “Graftor.981512” infection

The Graftor.981512 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Graftor.981512 virus can do?

Creates RWX memory
Dynamic (imported) function loading detected
Reads data out of its own binary image
Authenticode signature is invalid

How to determine Graftor.981512?


File Info:
name: 52BF9627DB700C8D607F.mlw
path: /opt/CAPEv2/storage/binaries/f89ab31ae1f7df62376ca3a492d8badf945dc15657971aba93f557d0bae25f64
crc32: 7804F1F6
md5: 52bf9627db700c8d607f164bd3e2ff97
sha1: 8647ddd9a6592af4f3aca83de3cac1b05ceff8f3
sha256: f89ab31ae1f7df62376ca3a492d8badf945dc15657971aba93f557d0bae25f64
sha512: 2ac8c6bd72f9d7518bd08ec9bd9677d6b7efe8527dfb1fe834f67d4db86201cbd8dcd7aedf85d685562c6d2c56c8645a3ea531eff041b027884ffb5c39567fef
ssdeep: 6144:u50gUCB9fdyZyyIf1uyPr9DTL8CDrpoLy:g0gnfdyZTg1JP1YCDrpoL
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1265501037BD98C71E5ED0AB15DB5E5A2587AFD160830E73B53908E9E3E31892CE14B1E
sha3_384: ed013d71c652f3dcdcd899f838b5d34771c56eda8772429500839d09e22b93356a102b225e860466c194147545d9f927
ep_bytes: 81ecd4020000535556576a2033ed5e89
timestamp: 2012-02-24 19:20:04

Version Info:
FileDescription: 
FileVersion: 1.0.0.0
LegalCopyright: lev
ProductVersion: 1.0.0.0
Translation: 0x0000 0x04b0

Graftor.981512 also known as:

Bkav	W32.AIDetect.malware1
Lionic	Trojan.Win32.Agent.m!c
MicroWorld-eScan	Gen:Variant.Graftor.981512
FireEye	Generic.mg.52bf9627db700c8d
ALYac	Gen:Variant.Graftor.981512
Zillya	Dropper.Mine.Win32.155
K7AntiVirus	Trojan ( 0054c4a01 )
Alibaba	Trojan:Win32/Crypzip.7ce10b30
K7GW	Trojan ( 0054c4a01 )
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	multiple detections
APEX	Malicious
ClamAV	Win.Packed.Filerepmalware-9864117-0
Kaspersky	Trojan.Win32.Crypzip.bua
BitDefender	Gen:Variant.Graftor.981512
SUPERAntiSpyware	Trojan.Agent/Gen-Crypzip
Avast	NSIS:MalwareX-gen [Trj]
Rising	Trojan.HiddenRun/SFX!1.D57B (CLASSIC)
Sophos	Mal/Generic-S
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	BehavesLike.Win32.Generic.tz
Emsisoft	Gen:Variant.Graftor.981512 (B)
SentinelOne	Static AI – Malicious PE
GData	Gen:Variant.Graftor.981512
Avira	TR/ClipBanker.ghwpe
MAX	malware (ai score=81)
Arcabit	Trojan.Graftor.DEFA08
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
Cynet	Malicious (score: 99)
AhnLab-V3	Trojan/Win.Generic.C4561194
McAfee	Artemis!52BF9627DB70
VBA32	Backdoor.Agent
TrendMicro-HouseCall	TROJ_GEN.R002H0DKO21
Tencent	Win32.Trojan-qqpass.Qqrob.Svrr
BitDefenderTheta	Gen:NN.ZexaF.34294.pr3@aWim4ijQ
AVG	NSIS:MalwareX-gen [Trj]
Panda	Trj/CI.A

How to remove Graftor.981512?

Graftor.981512 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X