MSIL/Kryptik.ADCO malicious file

The MSIL/Kryptik.ADCO is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What MSIL/Kryptik.ADCO virus can do?

Dynamic (imported) function loading detected
CAPE extracted potentially suspicious content
Authenticode signature is invalid

How to determine MSIL/Kryptik.ADCO?


File Info:
name: 33E421AA8032B19F8353.mlw
path: /opt/CAPEv2/storage/binaries/2003b15257db5fe416d80aaeb2b4c37f1c2668327234e798b90a2b3f97e83c35
crc32: DB970B34
md5: 33e421aa8032b19f8353804d049e1782
sha1: e0d75da9d5a613cf8301da92481830f686dbb85a
sha256: 2003b15257db5fe416d80aaeb2b4c37f1c2668327234e798b90a2b3f97e83c35
sha512: 1f87602e3ea9f71acddfcfc14868a95e44c164efb401b80e3f0110e396cefb7cd2772d2762c321cd8a8e314762cb26252d7c19f31653d23b04176b0d7593b6b8
ssdeep: 384:PeNc6Yx+CdamoKM0e3aBkECWkFN1ebo8ee4I7TV4OOfD8XEqOATFKWF2J:PeNZcJaEreaZCxFzakfIvq78X4ApKKm
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T128B2D03083D9DD7AFEDA6D350836D220AB737B5649B3EF2FA5C850C1F4131096A26394
sha3_384: e36b15f9d9d2e563be1c8829860e94f9d9b8b64fb1e39cc4be77045e2be826f36c4bc2f03aeaff3222caef6514f46215
ep_bytes: ff250020400000000000000000000000
timestamp: 2022-01-31 06:13:50

Version Info:
Translation: 0x0000 0x04b0
Comments: 
CompanyName: 
FileDescription: StubWithPassword
FileVersion: 1.0.0.0
InternalName: StubWithPassword.exe
LegalCopyright: Copyright ©  2018
LegalTrademarks: 
OriginalFilename: StubWithPassword.exe
ProductName: StubWithPassword
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

MSIL/Kryptik.ADCO also known as:

MicroWorld-eScan	Gen:Heur.MSIL.Krypt.!cdmip!.2
FireEye	Generic.mg.33e421aa8032b19f
McAfee	Artemis!33E421AA8032
Cylance	Unsafe
K7AntiVirus	Trojan ( 0057b79b1 )
Alibaba	Trojan:MSIL/Kryptik.2c15e717
K7GW	Trojan ( 0057b79b1 )
CrowdStrike	win/malicious_confidence_100% (W)
BitDefenderTheta	Gen:NN.ZemsilF.34182.bm2@aefqMHf
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/Kryptik.ADCO
APEX	Malicious
Avast	Win32:MalwareX-gen [Trj]
BitDefender	Gen:Heur.MSIL.Krypt.!cdmip!.2
Ad-Aware	Gen:Heur.MSIL.Krypt.!cdmip!.2
McAfee-GW-Edition	Artemis!Trojan
Sophos	Generic ML PUA (PUA)
Avira	TR/Dropper.Gen
MAX	malware (ai score=89)
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
GData	Gen:Heur.MSIL.Krypt.!cdmip!.2
AhnLab-V3	Malware/Win32.RL_Generic.C3752472
ALYac	Gen:Heur.MSIL.Krypt.!cdmip!.2
Malwarebytes	Trojan.Crypt
Rising	Malware.Obfus/MSIL@AI.100 (RDM.MSIL:WoxDxClfANW7DX/UtZh6xA)
SentinelOne	Static AI – Malicious PE
Fortinet	MSIL/Kryptik.ADCO!tr
AVG	Win32:MalwareX-gen [Trj]
Cybereason	malicious.a8032b

How to remove MSIL/Kryptik.ADCO?

MSIL/Kryptik.ADCO removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X