MSIL/Kryptik_AGen.BNO (file analysis)

The MSIL/Kryptik_AGen.BNO is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What MSIL/Kryptik_AGen.BNO virus can do?

Sample contains Overlay data
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
Anomalous binary characteristics
Binary compilation timestomping detected

How to determine MSIL/Kryptik_AGen.BNO?


File Info:
name: 9AC71E8B3B8FCE6D1EFE.mlw
path: /opt/CAPEv2/storage/binaries/6a07c9c4a892deb9a5015316b55138b15ba004536270bf5c6718256467bd71d6
crc32: 2250DFE0
md5: 9ac71e8b3b8fce6d1efe30fa6a246cc5
sha1: 6e92e87bccfb19a7c45f22201f3912e85d1a5713
sha256: 6a07c9c4a892deb9a5015316b55138b15ba004536270bf5c6718256467bd71d6
sha512: dba4dc78798cf99e93ab7df0ecee10a9351841365048f2d96f709cc6f5f1217b17f47c23276c14c87b7e59baf62f3bb8779cc5cf873c48553e22f23466cb5a4a
ssdeep: 24576:K9RVtnWyrJ2uAzlsnB8V7e4U1jkfKcDIYRP9Z9BsJ3LSF65a:AzkFjR9Z9e5LSd
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T12455F71339B4EFB7C01D053AA9DEE9481BFDF424A725E75B196D3768ECC2320485688E
sha3_384: e6f71fa08b60c8746bb3d8eb0af8ec9966e6f4e05d32259991a1eb41f8b47787524a775c80ce1300194fe60aeb7a1398
ep_bytes: 
timestamp: 2075-12-08 19:21:47

Version Info:
0: [No Data]

MSIL/Kryptik_AGen.BNO also known as:

Skyhigh	BehavesLike.Win32.Infected.th
Zillya	Trojan.KryptikAGen.Win32.20294
Symantec	Trojan.Gen.MBT
ESET-NOD32	a variant of MSIL/Kryptik_AGen.BNO
DrWeb	Trojan.PackedNET.2531
Kingsoft	malware.kb.c.723
Xcitium	Heur.Corrupt.PE@1z141z3
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
Google	Detected
Rising	Trojan.Scar!8.33F (CLOUD)
Ikarus	Trojan-Spy.Win32.Agent
Fortinet	MSIL/Kryptik.BNO!tr
DeepInstinct	MALICIOUS

How to remove MSIL/Kryptik_AGen.BNO?

MSIL/Kryptik_AGen.BNO removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X