Categories: Malware

Troj/Krypt-AAN information

The Troj/Krypt-AAN is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Troj/Krypt-AAN virus can do?

CAPE extracted potentially suspicious content
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Anomalous .NET characteristics

How to determine Troj/Krypt-AAN?


File Info:
name: 76685E426BDE621744E7.mlwpath: /opt/CAPEv2/storage/binaries/3f57ab60565132e8efddcae07bb3718dbd04e3cf8a4886eb7cede077707f7469crc32: 8595D6D1md5: 76685e426bde621744e788696db30524sha1: 9baa5cb165394b2b72f3a575bfd0c0b8222855f2sha256: 3f57ab60565132e8efddcae07bb3718dbd04e3cf8a4886eb7cede077707f7469sha512: 2592ce15bfcbe791d61cb4396db9e57c6313821298d3c323c193eac76e25b93a53536a6a4494cf0971df2be5213550c54c3f8c59bf6b181b569fe6973021d743ssdeep: 12288:zN1zKJjKUMz8mvKANWltGMLO9VfR4s3o1DjE/cuQf2hf0GiLjIpj99PR:pUMIeN4t5LYfR491DA0e0GiX09dtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T185E4128862BC4F37D57EDBF92091163043F862D9BA12E38A4FC274EB2D26F858754653sha3_384: ab65cb697515202550b4c7efbcc47ad100c316f9ccc4096062d9972fbc67782de10b7a5e9cf083583eb98e4616450259ep_bytes: ff250020400000000000000000000000timestamp: 2023-07-11 06:06:05
Version Info:
Translation: 0x0000 0x04b0FileDescription:  FileVersion: 0.0.0.0InternalName: EKkp.exeLegalCopyright:  OriginalFilename: EKkp.exeProductVersion: 0.0.0.0Assembly Version: 0.0.0.0

Troj/Krypt-AAN also known as:

Bkav	W32.AIDetectMalware.CS
Lionic	Trojan.Win32.Androm.4!c
Elastic	malicious (high confidence)
FireEye	Generic.mg.76685e426bde6217
CAT-QuickHeal	Trojan.GenericFC.S30550307
Skyhigh	BehavesLike.Win32.Generic.jc
McAfee	GenericRXWF-XE!76685E426BDE
Cylance	unsafe
VIPRE	Trojan.GenericKDZ.101770
Sangfor	Backdoor.Msil.Kryptik.V0h0
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	Backdoor:MSIL/Androm.0a3a3ad3
K7GW	Trojan ( 005a88521 )
K7AntiVirus	Trojan ( 005a88521 )
Arcabit	Trojan.Generic.D18D8A
VirIT	Trojan.Win32.MSIL_Heur.A
Symantec	Scr.Malcode!gdn34
ESET-NOD32	a variant of MSIL/GenKryptik.GLSH
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	HEUR:Backdoor.MSIL.Androm.gen
BitDefender	Trojan.GenericKDZ.101770
NANO-Antivirus	Trojan.Win32.Androm.jyhrpz
MicroWorld-eScan	Trojan.GenericKDZ.101770
Avast	Win32:DropperX-gen [Drp]
Tencent	Malware.Win32.Gencirc.13e9bddf
Emsisoft	Trojan.GenericKDZ.101770 (B)
F-Secure	Heuristic.HEUR/AGEN.1365033
DrWeb	Trojan.Loader.1598
Zillya	Backdoor.Androm.Win32.106045
Sophos	Troj/Krypt-AAN
Ikarus	Trojan.MSIL.Inject
Jiangmin	Backdoor.MSIL.gepo
Webroot	W32.Trojan.Gen
Google	Detected
Avira	HEUR/AGEN.1365033
Antiy-AVL	Trojan/MSIL.GenKryptik
Kingsoft	MSIL.Backdoor.Androm.gen
Xcitium	Malware@#1wbt6z6k74g50
Microsoft	Backdoor:MSIL/Androm.KAAC!MTB
ViRobot	Trojan.Win.Z.Agent.668672.B
ZoneAlarm	HEUR:Backdoor.MSIL.Androm.gen
GData	Trojan.GenericKDZ.101770
Varist	W32/MSIL_Kryptik.JPR.gen!Eldorado
AhnLab-V3	Trojan/Win.PWSX-gen.C5452165
VBA32	TScope.Trojan.MSIL
ALYac	Trojan.GenericKDZ.101770
MAX	malware (ai score=83)
Malwarebytes	Generic.Malware.AI.DDS
Panda	Trj/Chgt.AD
Rising	Malware.Obfus/MSIL@AI.100 (RDM.MSIL2:PwTdKX9LQVIx2Bc+D9uMCQ)
Yandex	Trojan.Igent.b0tqCC.1
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.73691364.susgen
Fortinet	MSIL/Kryptik.AGUH!tr
AVG	Win32:DropperX-gen [Drp]
DeepInstinct	MALICIOUS