Categories: Malware

About “Graftor.981512” infection

The Graftor.981512 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Graftor.981512 virus can do?

Creates RWX memory
Dynamic (imported) function loading detected
Reads data out of its own binary image
Authenticode signature is invalid

How to determine Graftor.981512?


File Info:
name: 52BF9627DB700C8D607F.mlwpath: /opt/CAPEv2/storage/binaries/f89ab31ae1f7df62376ca3a492d8badf945dc15657971aba93f557d0bae25f64crc32: 7804F1F6md5: 52bf9627db700c8d607f164bd3e2ff97sha1: 8647ddd9a6592af4f3aca83de3cac1b05ceff8f3sha256: f89ab31ae1f7df62376ca3a492d8badf945dc15657971aba93f557d0bae25f64sha512: 2ac8c6bd72f9d7518bd08ec9bd9677d6b7efe8527dfb1fe834f67d4db86201cbd8dcd7aedf85d685562c6d2c56c8645a3ea531eff041b027884ffb5c39567fefssdeep: 6144:u50gUCB9fdyZyyIf1uyPr9DTL8CDrpoLy:g0gnfdyZTg1JP1YCDrpoLtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1265501037BD98C71E5ED0AB15DB5E5A2587AFD160830E73B53908E9E3E31892CE14B1Esha3_384: ed013d71c652f3dcdcd899f838b5d34771c56eda8772429500839d09e22b93356a102b225e860466c194147545d9f927ep_bytes: 81ecd4020000535556576a2033ed5e89timestamp: 2012-02-24 19:20:04
Version Info:
FileDescription: FileVersion: 1.0.0.0LegalCopyright: levProductVersion: 1.0.0.0Translation: 0x0000 0x04b0

Graftor.981512 also known as:

Bkav	W32.AIDetect.malware1
Lionic	Trojan.Win32.Agent.m!c
MicroWorld-eScan	Gen:Variant.Graftor.981512
FireEye	Generic.mg.52bf9627db700c8d
ALYac	Gen:Variant.Graftor.981512
Zillya	Dropper.Mine.Win32.155
K7AntiVirus	Trojan ( 0054c4a01 )
Alibaba	Trojan:Win32/Crypzip.7ce10b30
K7GW	Trojan ( 0054c4a01 )
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	multiple detections
APEX	Malicious
ClamAV	Win.Packed.Filerepmalware-9864117-0
Kaspersky	Trojan.Win32.Crypzip.bua
BitDefender	Gen:Variant.Graftor.981512
SUPERAntiSpyware	Trojan.Agent/Gen-Crypzip
Avast	NSIS:MalwareX-gen [Trj]
Rising	Trojan.HiddenRun/SFX!1.D57B (CLASSIC)
Sophos	Mal/Generic-S
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	BehavesLike.Win32.Generic.tz
Emsisoft	Gen:Variant.Graftor.981512 (B)
SentinelOne	Static AI – Malicious PE
GData	Gen:Variant.Graftor.981512
Avira	TR/ClipBanker.ghwpe
MAX	malware (ai score=81)
Arcabit	Trojan.Graftor.DEFA08
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
Cynet	Malicious (score: 99)
AhnLab-V3	Trojan/Win.Generic.C4561194
McAfee	Artemis!52BF9627DB70
VBA32	Backdoor.Agent
TrendMicro-HouseCall	TROJ_GEN.R002H0DKO21
Tencent	Win32.Trojan-qqpass.Qqrob.Svrr
BitDefenderTheta	Gen:NN.ZexaF.34294.pr3@aWim4ijQ
AVG	NSIS:MalwareX-gen [Trj]
Panda	Trj/CI.A