Trojan

Trojan:Win32/InjectorCrypt!pz malicious file

Malware Removal

The Trojan:Win32/InjectorCrypt!pz is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Trojan:Win32/InjectorCrypt!pz virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • HTTPS urls from behavior.
  • CAPE extracted potentially suspicious content
  • The binary contains an unknown PE section name indicative of packing
  • The executable is compressed using UPX
  • Authenticode signature is invalid
  • Attempts to modify proxy settings
  • Deletes executed files from disk
  • Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Trojan:Win32/InjectorCrypt!pz?



File Info:

name: 6199915BBCE463935FD4.mlw
path: /opt/CAPEv2/storage/binaries/b5478c76fb6fed76e2e5d0c914f533c95c56ca962e52ea2c168fa91fdca2d970
crc32: CDBAF2F9
md5: 6199915bbce463935fd4579bc847116c
sha1: 292cbdc5ff8e5ca5e705833063453a3840aca9fc
sha256: b5478c76fb6fed76e2e5d0c914f533c95c56ca962e52ea2c168fa91fdca2d970
sha512: fb34da9b90846339b49a9fb5b39fd898b44b4ee2e6b2718d780266b3b36081b13fdcb9dd9fe3a4eef5419e743383e5e8310514dfac8fd31eb5043ee2fe15fd56
ssdeep: 3072:17OuXtbEqRgaKYOctzZSfNIgmZNdmWuogvXWcTtWl2/47XqRmbWUnxPA78AxNCBQ:Au9btXv8fSZhuogHTtG2AuotZUaQ
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T10DD3020048F10511F207BDB7C76028E14CA0B5BD59EDCDBA477AB9AFBA244C47EA62F5
sha3_384: 20348b9d27064879db1032819b8eea86145685e096bc9623f5fbb7afa7dc9cf1e83cc225422ef2777c6629bab5c3737a
ep_bytes: 5589e5bf0000000089d921c229c009c2
timestamp: 1970-01-01 00:00:00


Version Info:

0: [No Data]

Trojan:Win32/InjectorCrypt!pz also known as:

BkavW32.AIDetectMalware
LionicTrojan.Win32.Copak.4!c
tehtrisGeneric.Malware
MicroWorld-eScanGen:Trojan.Heur.imW@!hBy@@e
FireEyeGeneric.mg.6199915bbce46393
SkyhighBehavesLike.Win32.Generic.cm
ALYacGen:Trojan.Heur.imW@!hBy@@e
MalwarebytesTrojan.Injector
ZillyaTrojan.CopakGen.Win32.1
SangforSuspicious.Win32.Save.a
K7AntiVirusTrojan ( 0058c5ff1 )
AlibabaTrojan:Win32/Copak.3c91222d
K7GWTrojan ( 0058c5ff1 )
Cybereasonmalicious.5ff8e5
SymantecML.Attribute.HighConfidence
Elasticmalicious (high confidence)
ESET-NOD32a variant of Win32/Injector.DZQA
APEXMalicious
CynetMalicious (score: 100)
KasperskyHEUR:Trojan.Win32.Copak.pef
BitDefenderGen:Trojan.Heur.imW@!hBy@@e
AvastWin32:Evo-gen [Trj]
RisingTrojan.Injector!1.C865 (CLASSIC)
SophosMal/HckPk-A
F-SecureTrojan.TR/Crypt.XPACK.Gen
DrWebTrojan.Packed2.43250
VIPREGen:Trojan.Heur.imW@!hBy@@e
EmsisoftGen:Trojan.Heur.imW@!hBy@@e (B)
IkarusTrojan.Win32.Injector
JiangminTrojan.Copak.ames
GoogleDetected
AviraTR/Crypt.XPACK.Gen
MAXmalware (ai score=86)
Antiy-AVLTrojan/Win32.Injector
KingsoftWin32.Trojan.Copak.pef
MicrosoftTrojan:Win32/InjectorCrypt!pz
XcitiumMalCrypt.Indus!@1qrzi1
ArcabitTrojan.Heur.EFD32A
ZoneAlarmHEUR:Trojan.Win32.Copak.pef
GDataGen:Trojan.Heur.imW@!hBy@@e
VaristW32/Kryptik.DZR.gen!Eldorado
AhnLab-V3Malware/Win32.Generic.C2860595
McAfeeGenericRXAA-FA!6199915BBCE4
VBA32BScope.Trojan.Wacatac
Cylanceunsafe
PandaTrj/Genetic.gen
TencentTrojan.Win32.Copak.pe
YandexTrojan.Copak!0uHRl+eCz+w
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Kryptik.EAHK!tr
BitDefenderThetaAI:Packer.335106D81B
AVGWin32:Evo-gen [Trj]
DeepInstinctMALICIOUS
CrowdStrikewin/malicious_confidence_100% (W)

How to remove Trojan:Win32/InjectorCrypt!pz?

Trojan:Win32/InjectorCrypt!pz removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.
Trojan

Trojan:Win32/InjectorCrypt!pz information

Malware Removal

The Trojan:Win32/InjectorCrypt!pz is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Trojan:Win32/InjectorCrypt!pz virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • HTTPS urls from behavior.
  • CAPE extracted potentially suspicious content
  • The binary contains an unknown PE section name indicative of packing
  • The executable is compressed using UPX
  • Authenticode signature is invalid
  • Attempts to modify proxy settings
  • Creates a copy of itself
  • Deletes executed files from disk
  • Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Trojan:Win32/InjectorCrypt!pz?



File Info:

name: 61A963C82143FA4A7AB3.mlw
path: /opt/CAPEv2/storage/binaries/e9aadf2d540c035c3ce62ab66d2b49e69011a6fb75c5d6b0f41d5f0263654e7f
crc32: A1CA0EE1
md5: 61a963c82143fa4a7ab34a580c9b1815
sha1: 2d7dca6251b25aa2554c4f6da5b40b343a7b99cf
sha256: e9aadf2d540c035c3ce62ab66d2b49e69011a6fb75c5d6b0f41d5f0263654e7f
sha512: bc22f47a1418639005658d46e5d61985965c109f0526185c3266f7321910074f343b9b1debce161dea835ad89574fce76176544ba04f77f243bcaf091b1ee95a
ssdeep: 3072:iMjoESSgUMm8olNN+dYZWM1h9mlwuENHw99Q:djoES9QRv+YWM1hUlMarQ
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T181D302A3020DF05ED12D51F139FA4FE22F028CC9A6292D8755D4BFD776A5308DCA86A6
sha3_384: 5da0b024f4189ed45723f9a054765342d1cc71662360f66d63509f29985ab96f917bb8d2e814bbdb2492e56279449a90
ep_bytes: 5589e5ba0000000089fe81c0f60012ab
timestamp: 1970-01-01 00:00:00


Version Info:

0: [No Data]

Trojan:Win32/InjectorCrypt!pz also known as:

BkavW32.AIDetectMalware
LionicTrojan.Win32.Copak.4!c
tehtrisGeneric.Malware
MicroWorld-eScanGen:Trojan.Heur.imW@!hBy@@e
SkyhighBehavesLike.Win32.Generic.cm
McAfeeGenericRXAA-FA!61A963C82143
MalwarebytesTrojan.Injector
ZillyaTrojan.CopakGen.Win32.1
SangforSuspicious.Win32.Save.a
K7AntiVirusTrojan ( 0058c5ff1 )
AlibabaTrojan:Win32/Copak.402a4d79
K7GWTrojan ( 0058c5ff1 )
Cybereasonmalicious.251b25
ArcabitTrojan.Heur.EFD32A
SymantecML.Attribute.HighConfidence
Elasticmalicious (high confidence)
ESET-NOD32a variant of Win32/Injector.DZQA
CynetMalicious (score: 100)
APEXMalicious
KasperskyHEUR:Trojan.Win32.Copak.pef
BitDefenderGen:Trojan.Heur.imW@!hBy@@e
NANO-AntivirusTrojan.Win32.Copak.jwehgh
AvastWin32:Evo-gen [Trj]
TencentTrojan.Win32.Copak.pe
SophosMal/HckPk-A
F-SecureTrojan.TR/Crypt.XPACK.Gen
DrWebTrojan.Packed2.43250
VIPREGen:Trojan.Heur.imW@!hBy@@e
FireEyeGeneric.mg.61a963c82143fa4a
EmsisoftGen:Trojan.Heur.imW@!hBy@@e (B)
IkarusTrojan.Win32.Injector
JiangminTrojan.Copak.mhc
VaristW32/Kryptik.DZR.gen!Eldorado
AviraTR/Crypt.XPACK.Gen
Antiy-AVLTrojan/Win32.Injector
KingsoftWin32.Trojan.Copak.pef
XcitiumPacked.Win32.MUPX.Gen@24tbus
MicrosoftTrojan:Win32/InjectorCrypt!pz
ZoneAlarmHEUR:Trojan.Win32.Copak.pef
GDataGen:Trojan.Heur.imW@!hBy@@e
GoogleDetected
AhnLab-V3Malware/Win32.Generic.C2860595
VBA32BScope.Trojan.Wacatac
ALYacGen:Trojan.Heur.imW@!hBy@@e
MAXmalware (ai score=81)
Cylanceunsafe
PandaTrj/Genetic.gen
RisingTrojan.Kryptik!1.D238 (CLASSIC)
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Kryptik.EAHK!tr
BitDefenderThetaAI:Packer.335106D81B
AVGWin32:Evo-gen [Trj]
DeepInstinctMALICIOUS
CrowdStrikewin/malicious_confidence_100% (W)

How to remove Trojan:Win32/InjectorCrypt!pz?

Trojan:Win32/InjectorCrypt!pz removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment