Categories: Malware

What is “MSIL/GenKryptik.GLOG”?

The MSIL/GenKryptik.GLOG is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What MSIL/GenKryptik.GLOG virus can do?

Behavioural detection: Executable code extraction – unpacking
Sample contains Overlay data
Reads data out of its own binary image
CAPE extracted potentially suspicious content
Drops a binary and executes it
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
Deletes executed files from disk

How to determine MSIL/GenKryptik.GLOG?


File Info:
name: 9782B6F21237F0CFC564.mlwpath: /opt/CAPEv2/storage/binaries/2c34a6fb0defe948be10832d243d8084bd00a7fe25812d3ee959be609a65cd04crc32: E404538Emd5: 9782b6f21237f0cfc564ff4c245173c4sha1: 3c88cff8632e7807b8848411d24a1b79082cfb45sha256: 2c34a6fb0defe948be10832d243d8084bd00a7fe25812d3ee959be609a65cd04sha512: c000c860c7e307d0905e9c7a30901d8b3b13f4cb43bad496d94a3d7a71162264b13801b5460ee93708b0ad3198d24176118750fc38d71ffb339b6404b0d2c7bessdeep: 24576:/DkUNi1EvGiW1uzCVRBSx62k2VhBhCDTnLGShBO:/DkUrOiWIzCVRUpkOhBo7Otype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1BD251220BAC484B2D9B758345EE2A731AF3CB93017755FEB5B440A1E4F204C16A36F6Bsha3_384: 6117d4cc4d11fd1b803b3d75c95866bb9154635040a5488ddac1e8aa4302480530ed8d325e06d1bbc0418c0bc1e3c963ep_bytes: e8dc040000e978feffffe98a46000055timestamp: 2023-05-29 16:03:38
Version Info:
0: [No Data]

MSIL/GenKryptik.GLOG also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Zenpak.tspc
Elastic	malicious (high confidence)
DrWeb	Trojan.PackedNET.2160
MicroWorld-eScan	Trojan.GenericKD.68007028
FireEye	Generic.mg.9782b6f21237f0cf
CAT-QuickHeal	Trojan.GenericFC.S30550302
Skyhigh	BehavesLike.Win32.Generic.dc
ALYac	Trojan.GenericKD.68007028
Cylance	unsafe
Sangfor	Backdoor.Msil.Kryptik.Vy7v
Alibaba	Backdoor:MSIL/GenKryptik.157c585f
K7GW	Riskware ( 0040eff71 )
K7AntiVirus	Riskware ( 0040eff71 )
Arcabit	Trojan.Generic.D40DB474
VirIT	Trojan.Win32.Genus.RWB
Symantec	Trojan Horse
ESET-NOD32	a variant of MSIL/GenKryptik.GLOG
APEX	Malicious
TrendMicro-HouseCall	TROJ_GEN.R002C0DAO24
Avast	Win32:TrojanX-gen [Trj]
Kaspersky	Backdoor.MSIL.Agent.aezf
BitDefender	Trojan.GenericKD.68007028
NANO-Antivirus	Trojan.Win32.GenKryptik.jyhgyx
Tencent	Msil.Backdoor.Agent.Twhl
Emsisoft	Trojan.GenericKD.68007028 (B)
VIPRE	Trojan.GenericKD.68007028
TrendMicro	TROJ_GEN.R002C0DAO24
Sophos	Mal/Generic-R
Paloalto	generic.ml
MAX	malware (ai score=89)
Google	Detected
Varist	W32/Agen.GHVH-6183
Antiy-AVL	Trojan/MSIL.GenKryptik
Kingsoft	Win32.Hack.Unknown.a
Xcitium	Malware@#1c2ikzuok2tm4
Microsoft	Trojan:MSIL/Taskun.AAEN!MTB
ZoneAlarm	Backdoor.MSIL.Agent.aezf
GData	Trojan.GenericKD.68007028
Cynet	Malicious (score: 100)
McAfee	RDN/Leonem
VBA32	TrojanSpy.Cordimik
Malwarebytes	Generic.Crypt.Trojan.DDS
Panda	Trj/GdSda.A
Rising	Malware.Obfus/MSIL@AI.100 (RDM.MSIL2:M/P/Iojxq5dNkBx4vPJv5w)
Yandex	Trojan.Igent.b0rt7p.7
Ikarus	Trojan.MSIL.Inject
MaxSecure	Trojan.Malware.211316761.susgen
Fortinet	MSIL/Stealer.36680!tr
AVG	Win32:TrojanX-gen [Trj]
DeepInstinct	MALICIOUS
alibabacloud	Malware