MSIL/GenKryptik.GOKX (file analysis)

The MSIL/GenKryptik.GOKX is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What MSIL/GenKryptik.GOKX virus can do?

CAPE extracted potentially suspicious content
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid

How to determine MSIL/GenKryptik.GOKX?


File Info:
name: 9FD77DCD769C67C1878C.mlw
path: /opt/CAPEv2/storage/binaries/9a2c989e3e83777799a9d69355515344bb5eb3c599348e1b202348c3af6eac3c
crc32: FD967DEE
md5: 9fd77dcd769c67c1878cb3cdef3266c0
sha1: 016ba7e947d2742a1d1a6ae76d367bcf78f50058
sha256: 9a2c989e3e83777799a9d69355515344bb5eb3c599348e1b202348c3af6eac3c
sha512: 928796d98f976541e4d8fd49d3c848503963b4ac8ab15533816f5f4753f7f5e468e7b45cd9ddd33566ec1b9bb55fcefa4a14c53dae5a5d057e7eec06422525e7
ssdeep: 6144:f0n1hIKD2SJMcQdRayRsjCaUyHcqceOBrjGw6WGHCKjNKzPwM8inrCaZq6H7n5:w1/D2Slzdce0jJdKjNKzPwDiBk6b
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T16084F1C8620D5900E25F0332E9D633C9B9766D3ED921E339BEC4506235A364DE5CA7EB
sha3_384: d53077e19255e7831eaba730da65549a02ebc4a3cce24f6d9402bee347fce5982c38fcd7f6accd6074f53ecb40303ffa
ep_bytes: ff250020400000000000000000000000
timestamp: 2023-10-01 02:24:22

Version Info:
Translation: 0x0000 0x04b0
FileDescription:  
FileVersion: 1.0.0.0
InternalName: DynamicPropertyObject.exe
LegalCopyright:  
OriginalFilename: DynamicPropertyObject.exe
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

MSIL/GenKryptik.GOKX also known as:

Malwarebytes	Trojan.Crypt.MSIL
CrowdStrike	win/malicious_confidence_90% (D)
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of MSIL/GenKryptik.GOKX
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	UDS:Trojan-PSW.MSIL.Stealer.gen
Avast	PWSX-gen [Trj]
McAfee-GW-Edition	BehavesLike.Win32.Generic.fc
Trapmine	malicious.high.ml.score
FireEye	Generic.mg.9fd77dcd769c67c1
Ikarus	Win32.Outbreak
Kingsoft	malware.kb.c.1000
ZoneAlarm	UDS:Trojan-PSW.MSIL.Stealer.gen
Microsoft	Trojan:Win32/Wacatac.B!ml
Cylance	unsafe
Rising	Malware.Obfus/MSIL@AI.80 (RDM.MSIL2:gwmBQIra/deDgEbJSJJd8Q)
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	MSIL/GenKryptik.GOKX!tr
BitDefenderTheta	Gen:NN.ZemsilF.36738.ym0@aCeYIpn
AVG	PWSX-gen [Trj]
Cybereason	malicious.947d27
DeepInstinct	MALICIOUS

How to remove MSIL/GenKryptik.GOKX?

MSIL/GenKryptik.GOKX removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X