MSIL/Kryptik.LAS (file analysis)

The MSIL/Kryptik.LAS is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What MSIL/Kryptik.LAS virus can do?

Executable code extraction
Creates RWX memory

How to determine MSIL/Kryptik.LAS?


File Info:
crc32: FE66E987
md5: 280566ed62c79b4ec872fe5103eb1803
name: 280566ED62C79B4EC872FE5103EB1803.mlw
sha1: 2a6dd1f69b2bd80430aea953780e19df41c61f4e
sha256: 90bcc8285633166718080c20d891d668ea30606d0843611f534270637f6484f1
sha512: 4487924ac1f573513bc8f754af2c17863af24b4f6cf01dc60f1a52cd53c76033f9809012ef9bc283c192ba3f5609dafe82f366111b7628f8427d7a584b9aee2c
ssdeep: 6144:BGS1mFuc31FrlvdvBVNg5hzfyjSAPruks+38pWWMPN1s5EbD0nDmve:/Ot3pvdHNkfWSAiqsqPDamv
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright:  
Assembly Version: 0.0.0.0
InternalName: 5.exe
FileVersion: 0.0.0.0
ProductVersion: 0.0.0.0
FileDescription:  
OriginalFilename: 5.exe

MSIL/Kryptik.LAS also known as:

K7AntiVirus	Riskware ( 0040eff71 )
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
Cylance	Unsafe
Zillya	Trojan.Crypt.Win32.34979
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	Ransom:Win32/Blocker.1a7eb9e1
K7GW	Riskware ( 0040eff71 )
Cybereason	malicious.d62c79
Cyren	W32/Trojan.FWW.gen!Eldorado
ESET-NOD32	a variant of MSIL/Kryptik.LAS
APEX	Malicious
Avast	Win32:Malware-gen
Kaspersky	Trojan-Ransom.Win32.Blocker.kkwd
BitDefender	Gen:Heur.MSIL.Bladabindi.1
NANO-Antivirus	Trojan.Win32.Crypt.erjgfn
MicroWorld-eScan	Gen:Heur.MSIL.Bladabindi.1
Tencent	Win32.Trojan.Blocker.Hoyf
Ad-Aware	Gen:Heur.MSIL.Bladabindi.1
Sophos	Mal/Generic-S
BitDefenderTheta	Gen:NN.ZemsilF.34608.ym0@aW3zLo
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	BehavesLike.Win32.Generic.fh
FireEye	Generic.mg.280566ed62c79b4e
Emsisoft	Gen:Heur.MSIL.Bladabindi.1 (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	Trojan.MSIL.gmue
Avira	TR/Dropper.MSIL.Gen
eGambit	Unsafe.AI_Score_99%
Microsoft	Trojan:Win32/Ymacco.AA90
Arcabit	Trojan.MSIL.Bladabindi.1
AegisLab	Trojan.Win32.Generic.4!c
GData	Gen:Heur.MSIL.Bladabindi.1
McAfee	Artemis!280566ED62C7
MAX	malware (ai score=100)
Malwarebytes	Trojan.Agent.MSIL
Panda	Trj/GdSda.A
Rising	Ransom.Blocker!8.12A (CLOUD)
Yandex	Trojan.Crypt!scqyGxhubTY
Ikarus	Trojan.SuspectCRC
Fortinet	MSIL/Generic.AP.136668!tr
AVG	Win32:Malware-gen
Paloalto	generic.ml
Qihoo-360	Win32/Ransom.Blocker.HgIASOQA

How to remove MSIL/Kryptik.LAS?

MSIL/Kryptik.LAS removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X