About “Troj/Krypt-AEE” infection

The Troj/Krypt-AEE is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Troj/Krypt-AEE virus can do?

• Behavioural detection: Executable code extraction – unpacking
• Sample contains Overlay data
• Reads data out of its own binary image
• CAPE extracted potentially suspicious content
• Unconventionial language used in binary resources: Turkish
• The binary likely contains encrypted or compressed data.
• Authenticode signature is invalid
• CAPE detected the shellcode get eip malware family
• Anomalous binary characteristics
• Yara detections observed in process dumps, payloads or dropped files

How to determine Troj/Krypt-AEE?

File Info:
name: 62594FC204DDCA04D54A.mlw
path: /opt/CAPEv2/storage/binaries/5af72ee2e19e6fcad41888089786afef014a2948dff584a3a634ccf433ef0077
crc32: A8863EB7
md5: 62594fc204ddca04d54a2020065d65b5
sha1: e908b75a01f0cbf6b43357c4aa6ea12b99e73add
sha256: 5af72ee2e19e6fcad41888089786afef014a2948dff584a3a634ccf433ef0077
sha512: ea78c6bebec5f09c57347422f1ab69992a833fc3a5341472992e7022ded954719394e0e3e6740765ea5ddbc30ae999a732a05b6ee64fab402763ca3b4c920227
ssdeep: 6144:Yzmr8h8LJrmh1AgYKQMeKyZX4iXzEO0pmCktmFwCtqeq:nr8kJryEM/yZX4iXY/ktE3q
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T10774EFD13660C437CE5A6B714B20C6B0563E7D634BB4836F3288379E5F33AA1BA25356
sha3_384: 4fcc7a4ba09b8a01066ce0b627ce2934c1664161969e0e09cbc8e47c00a1954ea4cc014ff52c2e710f2dffc74767ea48
ep_bytes: e885450000e978feffffcccccccccccc
timestamp: 2023-02-05 03:53:33

Version Info:
FileVersions: 53.1.8.20
ProductVersion: 26.23.13.2
InternalName: Road
LegalCopyrights: Voice
CompanyNames: Sword
Translation: 0x010b 0x04e2

Troj/Krypt-AEE also known as:

How to remove Troj/Krypt-AEE?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.