Categories: Malware

Mal/Generic-S + Troj/Krypt-RQ information

The Mal/Generic-S + Troj/Krypt-RQ is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Mal/Generic-S + Troj/Krypt-RQ virus can do?

Behavioural detection: Executable code extraction – unpacking
Sample contains Overlay data
Presents an Authenticode digital signature
CAPE extracted potentially suspicious content
Unconventionial language used in binary resources: Tswana
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Detects Bochs through the presence of a registry key
Checks the version of Bios, possibly for anti-virtualization
Checks the CPU name from registry, possibly for anti-virtualization
Attempted to write directly to a physical drive
Accessed credential storage registry keys
Collects information to fingerprint the system
Anomalous binary characteristics

How to determine Mal/Generic-S + Troj/Krypt-RQ?


File Info:
name: 0E5E791FF341DF47B312.mlwpath: /opt/CAPEv2/storage/binaries/cbfe01eb852e114ce0f3573fd5cf2df043b788f5f5e49d98772c93c36a91ca89crc32: D479ED99md5: 0e5e791ff341df47b31279fd2e374111sha1: e2b25fa41be52c5b5d5c079bb5d4ee4f3b7b6370sha256: cbfe01eb852e114ce0f3573fd5cf2df043b788f5f5e49d98772c93c36a91ca89sha512: e40989e3e5bd79d710bf9a93ba27bd41909254072076398afc480e568d7aa1a49eb1532493087281fd528b555a897ee3c9530f95c5a1f861a95c470c5ff4ab1essdeep: 98304:YkEprrWZgNcbvkts8YMgITpDQYepoh0cizk30X91pCvK:WrrGgOrkbgITpDMoRizk30toKtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1BD16337FE64140E2C0441236C5ABAFB4152EB864A2F2665332F6229F453B3D6277E71Fsha3_384: 59d30a2dd4abdc3d903a3e7929cbd0a0d665de62da369e21a4591f929465ac96c9cb9754479c13c0595bdf6505942e0aep_bytes: e884550000e979feffffcccccccccccctimestamp: 2021-08-04 03:31:55
Version Info:
FileVersions: 68.78.22.14InternationalName: povgwaoci.iweCopyright: Copyright (C) 2022, somoklosProjectVersion: 78.66.15.65

Mal/Generic-S + Troj/Krypt-RQ also known as:

Bkav	W32.AIDetect.malware2
Lionic	Trojan.Win32.Chapak.4!c
AVG	Win32:TrojanX-gen [Trj]
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Heur.Mint.Zard.52
FireEye	Generic.mg.0e5e791ff341df47
CAT-QuickHeal	Trojan.Redline
ALYac	Gen:Heur.Mint.Zard.52
Cylance	Unsafe
VIPRE	Gen:Heur.Mint.Zard.52
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Riskware ( 00584baa1 )
Alibaba	Trojan:Win32/Raccoon.ab3d1972
K7GW	Riskware ( 00584baa1 )
Cyren	W32/Kryptik.HUW.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
tehtris	Generic.Malware
ESET-NOD32	a variant of Win32/Kryptik.HRIY
Cynet	Malicious (score: 100)
APEX	Malicious
Paloalto	generic.ml
ClamAV	Win.Dropper.Tofsee-9976196-0
Kaspersky	HEUR:Trojan.Win32.Chapak.gen
BitDefender	Gen:Heur.Mint.Zard.52
Avast	Win32:TrojanX-gen [Trj]
Tencent	Malware.Win32.Gencirc.1160377c
Ad-Aware	Gen:Heur.Mint.Zard.52
Emsisoft	Gen:Heur.Mint.Zard.52 (B)
DrWeb	Trojan.Siggen19.255
Zillya	Trojan.Kryptik.Win32.3941024
TrendMicro	TROJ_GEN.R03BC0WJT22
McAfee-GW-Edition	Lockbit-FSWW!0E5E791FF341
Trapmine	malicious.high.ml.score
Sophos	Mal/Generic-S + Troj/Krypt-RQ
SentinelOne	Static AI – Suspicious PE
GData	Gen:Heur.Mint.Zard.52
Avira	TR/Crypt.Agent.kntyt
MAX	malware (ai score=81)
Antiy-AVL	Trojan/Generic.ASMalwS.50E8
Arcabit	Trojan.Mint.Zard.52
Microsoft	Trojan:Win32/Raccoon.RE!MTB
Google	Detected
AhnLab-V3	Trojan/Win.RedLine.R532112
Acronis	suspicious
McAfee	Artemis!0E5E791FF341
Malwarebytes	Trojan.MalPack.GS
TrendMicro-HouseCall	TROJ_GEN.R03BC0WJT22
Rising	Trojan.Generic@AI.100 (RDML:apwhfWQXLaPgNZnrJzYdiA)
Ikarus	Trojan-Ransom.StopCrypt
MaxSecure	Trojan.Malware.73643692.susgen
Fortinet	W32/GenericKDZ.B365!tr