What is “Trojan.Krypt”?

The Trojan.Krypt is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan.Krypt virus can do?

Sample contains Overlay data
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Trojan.Krypt?


File Info:
name: 1A06AEDD0652C8CC0880.mlw
path: /opt/CAPEv2/storage/binaries/35528cbe948a2a4d15d5bdeeac9e2db90654d66ed6cf6c410caccb26aff89722
crc32: 20B25CE4
md5: 1a06aedd0652c8cc088032bff4cf438f
sha1: f3aa040d2c5446cdac8b4e21b85d3f40758232aa
sha256: 35528cbe948a2a4d15d5bdeeac9e2db90654d66ed6cf6c410caccb26aff89722
sha512: 682a05bab74e16b36125c1ca74706356db7c20fc703be42bfd17abe01eb06b872d742c2e962e1e2bfbddd222a59a35a4c4c08d70e56be1f283050f19d4f7aa49
ssdeep: 96:W1Y/fjKAWE+KAWE92mF8BqCO138d+hNtBeLjDYPPai93+FrELg:W1Y/fjCE+CEkmiBqx13FerwT9OKM
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T191D394532DD55473C0CF66B2FEB4C8BE8972811C8B1E63453599C798289722CCDA5FD0
sha3_384: 2c1bd96daf33d2f5a338e94bfdb4df55f5751a7ca0033407f0343964784e5cc5d3c4908eca6c922a5836b3911935f9af
ep_bytes: 8bc63dfcb0e8868d05ac6b7c118bc48b
timestamp: 2006-04-26 16:20:45

Version Info:
0: [No Data]

Trojan.Krypt also known as:

Bkav	W32.AIDetect.malware1
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Trojan.Heur.FU.ieX@aKqKSMn
FireEye	Generic.mg.1a06aedd0652c8cc
CAT-QuickHeal	Trojan.Heur.S232611
ALYac	Gen:Trojan.Heur.FU.ieX@aKqKSMn
Cylance	Unsafe
VIPRE	Gen:Trojan.Heur.FU.ieX@aKqKSMn
Sangfor	Suspicious.Win32.Save.a
K7AntiVirus	Trojan ( 0050655f1 )
Alibaba	Malware:Win32/km_2a8b722.None
K7GW	Trojan ( 0050655f1 )
CrowdStrike	win/malicious_confidence_100% (D)
BitDefenderTheta	AI:Packer.D32CBCDE1E
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	Win32/RiskWare.PEMalform.F
APEX	Malicious
BitDefender	Gen:Trojan.Heur.FU.ieX@aKqKSMn
NANO-Antivirus	Trojan.Win32.PEMalform.jrfovi
Avast	Win32:Evo-gen [Susp]
Ad-Aware	Gen:Trojan.Heur.FU.ieX@aKqKSMn
Emsisoft	Gen:Trojan.Heur.FU.ieX@aKqKSMn (B)
Comodo	Application.Win32.PEMalform.Q@6qj1xe
TrendMicro	TROJ_GEN.R03BC0PHB22
McAfee-GW-Edition	GenericRXDW-YM!1A06AEDD0652
Trapmine	malicious.high.ml.score
Sophos	Generic ML PUA (PUA)
SentinelOne	Static AI – Malicious PE
Google	Detected
Avira	TR/Crypt.XPACK.Gen
Microsoft	Trojan:Win32/Wacatac.B!ml
GData	Gen:Trojan.Heur.FU.ieX@aKqKSMn
Cynet	Malicious (score: 100)
McAfee	GenericRXDW-YM!1A06AEDD0652
MAX	malware (ai score=81)
VBA32	Trojan.Krypt
Malwarebytes	Malware.Heuristic.1004
TrendMicro-HouseCall	TROJ_GEN.R03BC0PHB22
Rising	Trojan.Generic@AI.96 (RDML:XUbRWNARwzmOpaWwJG9otg)
Ikarus	Trojan.Win32.Genome
Fortinet	W32/Krypt.MSKG!tr
AVG	Win32:Evo-gen [Susp]
Cybereason	malicious.d0652c

How to remove Trojan.Krypt?

Trojan.Krypt removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X