What is “MSIL/Kryptik.ABHA”?

The MSIL/Kryptik.ABHA is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What MSIL/Kryptik.ABHA virus can do?

The binary likely contains encrypted or compressed data.
Network activity detected but not expressed in API logs

How to determine MSIL/Kryptik.ABHA?


File Info:
crc32: D3E854EA
md5: 33e5d41c8c70b1b9cf9ed44b5a4db9df
name: 33E5D41C8C70B1B9CF9ED44B5A4DB9DF.mlw
sha1: 292e8f921070534332a4b0dbf7b8c86d761e18ff
sha256: 98da1ec96fd2444a4aa095d87c1346482389eabd517e70ab74577171ffda6937
sha512: 4ef38df8039503a8d0a4a66568483b678aa68037794bbc317113184caed536477d033a3c5cebb9d6b3d4410fef0c43cde0514aca5dbbc81633d20db679e6e1a0
ssdeep: 24576:XYEa5hhwTu4XX6dtdtda3kaRqcZfiposb542C:XYEa5hhwTu0qcZfQJ2T
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9  2016 - 2021
Assembly Version: 1.12.0.8
InternalName: c.exe
FileVersion: 1.12.0.8
CompanyName: Erlebacher's
LegalTrademarks: 
Comments: 2010 Nissan Xterra
ProductName: Files Generator
ProductVersion: 1.12.0.8
FileDescription: Files Generator
OriginalFilename: c.exe

MSIL/Kryptik.ABHA also known as:

Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
Cybereason	malicious.210705
Symantec	Scr.Malcode!gdn30
ESET-NOD32	a variant of MSIL/Kryptik.ABHA
APEX	Malicious
Avast	Win32:PWSX-gen [Trj]
Kaspersky	UDS:Trojan-Spy.MSIL.Noon.gen
BitDefenderTheta	Gen:NN.ZemsilF.34722.9m0@aiwtF2b
FireEye	Generic.mg.33e5d41c8c70b1b9
SentinelOne	Static AI – Suspicious PE
Microsoft	Trojan:Win32/AgentTesla!ml
Malwarebytes	Trojan.MalPack.ADC
Ikarus	Backdoor.MSIL.Bladabindi
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	MSIL/Kryptik.ABGM!tr
AVG	Win32:PWSX-gen [Trj]

How to remove MSIL/Kryptik.ABHA?

MSIL/Kryptik.ABHA removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X