Categories: Trojan

About “Trojan.Agent.Delf.Krypt” infection

The Trojan.Agent.Delf.Krypt is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Agent.Delf.Krypt virus can do?

Yara rule detections observed from a process memory dump/dropped files/CAPE
Dynamic (imported) function loading detected
Performs HTTP requests potentially not found in PCAP.
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
CAPE detected the Azorult malware family
Attempts to modify proxy settings
Collects information to fingerprint the system
Anomalous binary characteristics

How to determine Trojan.Agent.Delf.Krypt?


File Info:
name: 3A711232982B00835C53.mlwpath: /opt/CAPEv2/storage/binaries/c0c3b6ce4cb7070677c13f9432f87dc5901194636793202a60417bdde3909bbecrc32: BEF2D651md5: 3a711232982b00835c53070e8766b132sha1: 359ed981812912376082ed4698d9c5de3c6b34d8sha256: c0c3b6ce4cb7070677c13f9432f87dc5901194636793202a60417bdde3909bbesha512: 088bb84863e3ca282a8390c8683e1483a2b655daac091f057d363de70a8c19bbc57ec97b61320ba3379a96bcfbff193ffb2a1195f48113e8dd7d99a76345a3adssdeep: 3072:tuOSXpMx7ZAlHsbfUkolNGti7lfqeSxM3SpyEYnE/Zxg/:Zzx7ZApszolIo7lf/ipT/Ztype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T12AB3197AF6C19672E02808BDCD46D1B6912D76302D3918B6B2DA4F8CD5F95C26E2C3C7sha3_384: 317d2be8876a360a4cc3e0539e732a3bb6cd0156808f6583275be895afb3ac6022bd9acdf81023408f9ef88d30f8acb2ep_bytes: 558bec83c4f0b890a04100e854abfefftimestamp: 1992-06-19 22:22:17
Version Info:
0: [No Data]

Trojan.Agent.Delf.Krypt also known as:

Lionic	Trojan.Win32.Lmir.laiL
Elastic	malicious (high confidence)
DrWeb	Trojan.PWS.Stealer.26517
MicroWorld-eScan	Trojan.PWS.ZNN
FireEye	Generic.mg.3a711232982b0083
CAT-QuickHeal	Trojan.Sigmal.S3989901
McAfee	GenericRXGI-KI!3A711232982B
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
Sangfor	Ransom.Win32.Foreign_18.se
K7AntiVirus	Password-Stealer ( 0052f96e1 )
Alibaba	TrojanPSW:Win32/Blocker.28f857ef
K7GW	Password-Stealer ( 0052f96e1 )
Cybereason	malicious.2982b0
BitDefenderTheta	AI:Packer.F1D56E081D
VirIT	Trojan.Win32.Stealer.BJYQ
Cyren	W32/Delf_Troj.D.gen!Eldorado
Symantec	Trojan Horse
ESET-NOD32	Win32/PSW.Delf.OSF
TrendMicro-HouseCall	TrojanSpy.Win32.CLIPBANKER.SMMR
Avast	Win32:PWSX-gen [Trj]
Cynet	Malicious (score: 100)
Kaspersky	Trojan-Ransom.Win32.Blocker.lckf
BitDefender	Trojan.PWS.ZNN
NANO-Antivirus	Trojan.Win32.Stealer.fflqpr
Tencent	Malware.Win32.Gencirc.10b0cce1
Emsisoft	Trojan-Spy.Agent (A)
Comodo	TrojWare.Win32.PWS.Stimilina.O@8037s1
Zillya	Trojan.Blocker.Win32.40079
McAfee-GW-Edition	BehavesLike.Win32.Generic.ch
Sophos	Mal/Generic-R + Troj/PWS-CJJ
Paloalto	generic.ml
Jiangmin	Trojan.PSW.Coins.buh
Webroot	W32.Trojan.Gen
Avira	TR/AD.MoksSteal.elw
Antiy-AVL	Trojan/Generic.ASMalwS.27044F8
Kingsoft	Win32.Troj.Undef.(kcloud)
Gridinsoft	Ransom.Win32.Azorult.sa
Microsoft	PWS:Win32/Delf.R!MTB
ViRobot	Trojan.Win32.Z.Delf.115200.AL
ZoneAlarm	Trojan-Ransom.Win32.Blocker.lckf
GData	Win32.Trojan-Stealer.KBot.B
TACHYON	Trojan-PWS/W32.DP-InfoStealer.115200
AhnLab-V3	Trojan/Win32.Delf.R255889
ALYac	Trojan.Agent.Delf.Krypt
MAX	malware (ai score=100)
VBA32	BScope.TrojanPSW.Stealer
Malwarebytes	Spyware.AzorUlt
APEX	Malicious
Rising	Stealer.AZORult!1.B7AE (CLOUD)
Yandex	Trojan.GenAsa!zpkWsvf3gpo
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Delf.OSF!tr
AVG	Win32:PWSX-gen [Trj]
Panda	Trj/CI.A
CrowdStrike	win/malicious_confidence_100% (W)