Categories: Malware

Should I remove “Win32/GenKryptik.FZAN”?

The Win32/GenKryptik.FZAN is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/GenKryptik.FZAN virus can do?

Yara rule detections observed from a process memory dump/dropped files/CAPE
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
CAPE detected the RedLine malware family

How to determine Win32/GenKryptik.FZAN?


File Info:
name: 29CFED27A71E108F7502.mlwpath: /opt/CAPEv2/storage/binaries/bdc6e7b6b40168c91cc0484b1405d8e280c61d9de2409c62b398a64523481793crc32: 83BFA00Dmd5: 29cfed27a71e108f75020ee063c036easha1: ca27da8d9dee28d8476d97628426bd210c2565d1sha256: bdc6e7b6b40168c91cc0484b1405d8e280c61d9de2409c62b398a64523481793sha512: 6ace7f4565aa3ef63839cdd95088372196f9954b99c81a1f4158b4217994776b7176ab1b60b88269c15c83470bc76abde49765c266eaadca7865691e48f8c0fbssdeep: 12288:ia1XVxwL1YZWnv4ygo63VSEv8dguck1dIddQmDavau3:51FxTygZMEv8djAnDavaqtype: PE32 executable (console) Intel 80386, for MS Windowstlsh: T13D948D12B5C08032D2B234350779D2F539EDA4A05A675ACF67DC497ABF20AC19B3972Fsha3_384: c9d144bafba63c8b0bc55d2da73ad2db4abdf6162475a47ce37c5695ad3d1bcb46b5dc0ea45e2a739405ca52ecf9c0fbep_bytes: e81a070000e917feffff558bec6a00fftimestamp: 2022-08-18 20:45:26
Version Info:
0: [No Data]

Win32/GenKryptik.FZAN also known as:

Bkav	W32.AIDetect.malware2
Elastic	malicious (high confidence)
DrWeb	Trojan.PWS.Stealer.32832
MicroWorld-eScan	Gen:Variant.Zusy.435603
FireEye	Generic.mg.29cfed27a71e108f
Cylance	Unsafe
BitDefenderTheta	Gen:NN.ZexaF.34606.AqW@aW8VLog
ESET-NOD32	a variant of Win32/GenKryptik.FZAN
APEX	Malicious
BitDefender	Gen:Variant.Zusy.435603
Avast	Win32:PWSX-gen [Trj]
Ad-Aware	Gen:Variant.Zusy.435603
Emsisoft	Gen:Variant.Zusy.435603 (B)
VIPRE	Gen:Variant.Zusy.435603
Trapmine	malicious.moderate.ml.score
SentinelOne	Static AI – Suspicious PE
GData	Gen:Variant.Zusy.435603
MAX	malware (ai score=88)
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win.Generic.C5142678
ALYac	Gen:Variant.Zusy.435603
Rising	Trojan.Generic@AI.83 (RDML:SwvNOdAb1QECrgA3QhQNlg)
AVG	Win32:PWSX-gen [Trj]