MSIL/GenKryptik.BRT information

The MSIL/GenKryptik.BRT is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What MSIL/GenKryptik.BRT virus can do?

Dynamic (imported) function loading detected
CAPE extracted potentially suspicious content
Authenticode signature is invalid

How to determine MSIL/GenKryptik.BRT?


File Info:
name: 75ED97F3A6C8AB99E341.mlw
path: /opt/CAPEv2/storage/binaries/b5fb66057c9602c83890cc8f340d2534932e4dc88b9001bc98f04971b22b3377
crc32: 920FC9B8
md5: 75ed97f3a6c8ab99e341995d3fa1d523
sha1: 43f0d3d6b995dfe7687ee03bbf2b95df1cb34a6a
sha256: b5fb66057c9602c83890cc8f340d2534932e4dc88b9001bc98f04971b22b3377
sha512: 868f5f134246d322992e9157d48576ad17ab4552b726a74aab38283423096dff856e818d62b264dedcf1bba8d24458f09a5cb1b1823fc41a8a7dfbe4df940a80
ssdeep: 3072:I32GhNvjtEGO6IBNzm4hfa1Yfm4K965x9+8PJzFbHDq9sN:e2GhNSx51JWYfmzCx91vbHDu
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1B5C3B32439EE502EF1B3AFBA5BE074D69A6EF6733707945E1091034A4723E41CED163A
sha3_384: bc605f64251a2856b0448e893a1a9cb59af9baa56249a8d97718441fb524700a3ebb962070810285bcd3214c006d14ad
ep_bytes: ff250020400000000000000000000000
timestamp: 2021-12-05 09:04:08

Version Info:
Translation: 0x0000 0x04b0
FileDescription: aes
FileVersion: 1.0.0.0
InternalName: aes.exe
LegalCopyright: Copyright ©  2021
OriginalFilename: aes.exe
ProductName: aes
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

MSIL/GenKryptik.BRT also known as:

Elastic	malicious (high confidence)
FireEye	Generic.mg.75ed97f3a6c8ab99
K7AntiVirus	Trojan ( 0056ba171 )
K7GW	Trojan ( 0056ba171 )
Cybereason	malicious.6b995d
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/GenKryptik.BRT
APEX	Malicious
Kaspersky	HEUR:Backdoor.MSIL.Bladabindi.gen
Avast	Win32:Trojan-gen
DrWeb	BackDoor.BladabindiNET.10
McAfee-GW-Edition	Artemis
Sophos	Mal/Generic-S
SentinelOne	Static AI – Malicious PE
GData	Win32.Trojan.Agent.Z2HT59
Avira	HEUR/AGEN.1137787
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
Cynet	Malicious (score: 99)
McAfee	Artemis!75ED97F3A6C8
TrendMicro-HouseCall	TROJ_GEN.R014H0CL721
Ikarus	Trojan.MSIL.Krypt
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	MSIL/Kryptik.GZF!tr
BitDefenderTheta	Gen:NN.ZemsilF.34084.hm0@ae3Oacg
AVG	Win32:Trojan-gen
CrowdStrike	win/malicious_confidence_100% (W)

How to remove MSIL/GenKryptik.BRT?

MSIL/GenKryptik.BRT removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X