Categories: Malware

MSIL/Kryptik.YUU (file analysis)

The MSIL/Kryptik.YUU is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What MSIL/Kryptik.YUU virus can do?

The binary likely contains encrypted or compressed data.
Network activity detected but not expressed in API logs
Unusual version info supplied for binary

How to determine MSIL/Kryptik.YUU?


File Info:
crc32: 7A2AF10Dmd5: 7e26e87ab642008d934824d509559859name: 7E26E87AB642008D934824D509559859.mlwsha1: 3d4dc73fee1b191c2b942e28920c37c82d38b0edsha256: 3176528c561817095af859f4809a2091f8557f93c27a0fe32ee71c8fc3b71f33sha512: c51d64487f852b3d24c4f6b6c2eb79deac9394a607be1b8287bd087398b17b5403ddace34eb46fd0a5807e044ecc6869213ccef9eeda4604d7a1df711b691a2cssdeep: 12288:MiUO3Iy0AZNVNpiWbYOoa09FQFFFFFFFFFFFFFFFFFFFFFRYH8txxxxxxxxxxxx:InULziIYpaIFqtype: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Version Info:
Translation: 0x0000 0x04b0LegalCopyright: (c) 2020 Skype and/or MicrosoftAssembly Version: 8.65.0.76InternalName: Cxnjmhojuh1.exeFileVersion: 8.65.0.76CompanyName: Skype Technologies S.A.Comments: Skype SetupProductName: SkypeProductVersion: 8.65.0.76FileDescription: Skype SetupOriginalFilename: Cxnjmhojuh1.exe

MSIL/Kryptik.YUU also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Bulz.232156
McAfee	Artemis!7E26E87AB642
Cylance	Unsafe
AegisLab	Trojan.Win32.Bulz.4!c
CrowdStrike	win/malicious_confidence_60% (D)
BitDefender	Gen:Variant.Bulz.232156
K7AntiVirus	Riskware ( 0040eff71 )
Arcabit	Trojan.Bulz.D38ADC
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Paloalto	generic.ml
Kaspersky	UDS:DangerousObject.Multi.Generic
Alibaba	Trojan:Win32/Kryptik.ali2000016
Ad-Aware	Gen:Variant.Bulz.232156
Emsisoft	Trojan.Crypt (A)
F-Secure	Heuristic.HEUR/AGEN.1136389
DrWeb	Trojan.Siggen11.49728
McAfee-GW-Edition	BehavesLike.Win32.Generic.hc
FireEye	Generic.mg.7e26e87ab642008d
Sophos	Mal/Generic-S
SentinelOne	Static AI – Malicious PE
Avira	HEUR/AGEN.1136389
MAX	malware (ai score=89)
Kingsoft	Win32.Troj.Generic_a.a.(kcloud)
Microsoft	Trojan:Win32/Wacatac.D3!ml
ZoneAlarm	UDS:DangerousObject.Multi.Generic
GData	Gen:Variant.Bulz.232156
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win32.Kryptik.C4230598
ALYac	Gen:Variant.Bulz.232156
ESET-NOD32	a variant of MSIL/Kryptik.YUU
TrendMicro-HouseCall	TROJ_GEN.R002H09KR20
Ikarus	Win32.Outbreak
Fortinet	PossibleThreat.PALLAS.H
BitDefenderTheta	Gen:NN.ZemsilF.34658.Hm0@aKeXmTc
AVG	FileRepMetagen [Malware]
Qihoo-360	Generic/Trojan.54c