Malware

About “Win32/GenKryptik.FUDT” infection

Malware Removal

The Win32/GenKryptik.FUDT is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32/GenKryptik.FUDT virus can do?

  • Unconventionial binary language: Chinese (Simplified)
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Win32/GenKryptik.FUDT?


File Info:

name: 662C124A0B0A31A41896.mlw
path: /opt/CAPEv2/storage/binaries/4ae63122730c8fdfe4abd7d38fea096c1ce6ac1ec7c0e5423ea4d34c10159062
crc32: 2FAA2CE6
md5: 662c124a0b0a31a41896f184138e5dcd
sha1: 7adf94edfcfd80ed40dcfb8cc83988534165ec85
sha256: 4ae63122730c8fdfe4abd7d38fea096c1ce6ac1ec7c0e5423ea4d34c10159062
sha512: 410dd84e331aa6b4b110c0cb9c99b3818935ddae0927d96cac32d5b9aa48768aa48701083d9161cf4869d0a05160a2a15244a114f3f1d2073884470068460c40
ssdeep: 196608:85FoqSmTiXgDywtBhVaSnomwK3LVUK2CDXmIW0RdSKShs6LjV1bKbFLOyomFHKnP:UFo9I339ZLu98mV0RdhcsgPKbF
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T19BC601217F7C8427D7E292370E9CB22F50EEAD3D1635075325D13A7E2931A93D928A27
sha3_384: 5c1597b0907f699b7c9cf68d6ab5903478b0fa85916fb4a95e5dfaaad97b90a75760e0ae3b88a9d319adb1df9a377cca
ep_bytes: e83ba40000e97ffeffff3b0d90146000
timestamp: 2023-02-27 10:11:46

Version Info:

CompanyName: TODO:
FileDescription: yhszrfv
FileVersion: 2.0.0.1
InternalName: yhszrfv.exe
LegalCopyright: TODO: (C) 。 保留所有权利。
OriginalFilename: yhszrfv.exe
ProductName: TODO:
ProductVersion: 2.0.0.1
Translation: 0x0804 0x04b0

Win32/GenKryptik.FUDT also known as:

LionicTrojan.Win32.Generic.4!c
MalwarebytesGeneric.Malware/Suspicious
ZillyaTrojan.GenKryptik.Win32.166767
SangforTrojan.Win32.Kryptik.Vscy
K7AntiVirusTrojan ( 005928c31 )
AlibabaTrojan:Win32/GenKryptik.4eb503ef
K7GWTrojan ( 005928c31 )
CrowdStrikewin/malicious_confidence_90% (D)
BitDefenderThetaGen:NN.ZexaF.36164.@x0@aWTNNrpb
CyrenW32/GameHack.CO.gen!Eldorado
SymantecML.Attribute.HighConfidence
Elasticmalicious (high confidence)
ESET-NOD32a variant of Win32/GenKryptik.FUDT
APEXMalicious
Paloaltogeneric.ml
AvastWin32:Evo-gen [Trj]
TencentMalware.Win32.Gencirc.1183ebfd
F-SecureTrojan.TR/Kryptik.rkzxg
McAfee-GW-EditionBehavesLike.Win32.Dropper.wc
SophosMal/Generic-S
GDataWin32.Trojan.Agent.BB4AEF
GoogleDetected
AviraTR/Kryptik.rkzxg
Antiy-AVLTrojan/Win32.GenKryptik
MicrosoftTrojan:Win32/Wacatac.B!ml
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win.CVE-2012-0152.C5146473
McAfeeArtemis!662C124A0B0A
TrendMicro-HouseCallTROJ_GEN.R023H0AC123
RisingTrojan.Kryptik!8.8 (CLOUD)
IkarusTrojan.Win32.Krypt
FortinetW32/GenKryptik.FUDT!tr
AVGWin32:Evo-gen [Trj]
DeepInstinctMALICIOUS

How to remove Win32/GenKryptik.FUDT?

Win32/GenKryptik.FUDT removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment