Win32/GenKryptik.FKAU malicious file

The Win32/GenKryptik.FKAU is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/GenKryptik.FKAU virus can do?

Executable code extraction
Attempts to connect to a dead IP:Port (4 unique times)
Creates RWX memory
HTTP traffic contains suspicious features which may be indicative of malware related traffic
Performs some HTTP requests
Unconventionial language used in binary resources: Slovenian
The binary likely contains encrypted or compressed data.
Collects information to fingerprint the system
Anomalous binary characteristics

Related domains:

telete.in

apps.identrust.com

How to determine Win32/GenKryptik.FKAU?


File Info:
crc32: EE2989EA
md5: 1d0bd55c66ac9eb273f4017230d45bd2
name: 1D0BD55C66AC9EB273F4017230D45BD2.mlw
sha1: c8607d9a05e37f7eddb6a2660173b3127dae88f5
sha256: 435025a3a84b8da4ccab5d7fd59de3f2c4f58b11db8e11adcfee10c99f491d63
sha512: 2577524c5109b83eece882c4466e9c927662ce0c59bdff49604b93d825f132690badf16726837b77f610d8d0662d3d61b366a6c5061d9a5f4ac60219f6c553e7
ssdeep: 12288:F6xbODRkWS+dzdcBygQ8C/jKr/eStlNDkjEonf:0OSWxdeEPjknmnn
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
InternalName: sahzmoamoru.apa
ProductVersion: 7.19.29.13
Copyright: Copyrighz (C) 2021, fudkagata
Translation: 0x0121 0x009f

Win32/GenKryptik.FKAU also known as:

Bkav	W32.AIDetect.malware1
K7AntiVirus	Trojan ( 0056d16b1 )
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (D)
K7GW	Trojan ( 0056d16b1 )
Cyren	W32/Kryptik.EWJ.gen!Eldorado
ESET-NOD32	a variant of Win32/GenKryptik.FKAU
APEX	Malicious
Avast	Win32:CrypterX-gen [Trj]
Kaspersky	UDS:Trojan-PSW.Win32.Racealer.gen
Sophos	ML/PE-A
BitDefenderTheta	Gen:NN.ZexaF.34126.Gq0@au3X77jc
McAfee-GW-Edition	BehavesLike.Win32.Worm.hc
FireEye	Generic.mg.1d0bd55c66ac9eb2
SentinelOne	Static AI – Malicious PE
Microsoft	Trojan:Win32/Sabsik.TE.B!ml
AhnLab-V3	Malware/Win.Generic.C4623495
Acronis	suspicious
McAfee	RDN/GCleaner
Malwarebytes	MachineLearning/Anomalous.100%
Rising	Trojan.Kryptik!1.D8AC (CLASSIC)
Ikarus	Trojan-Banker.UrSnif
MaxSecure	Trojan.Malware.300983.susgen
AVG	Win32:CrypterX-gen [Trj]

How to remove Win32/GenKryptik.FKAU?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Win32/GenKryptik.FKAU malicious file