Categories: Malware

Win32/Kryptik.DEQH information

The Win32/Kryptik.DEQH is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/Kryptik.DEQH virus can do?

Yara rule detections observed from a process memory dump/dropped files/CAPE
Authenticode signature is invalid
Mimics icon used for popular non-executable file format
Anomalous binary characteristics

How to determine Win32/Kryptik.DEQH?


File Info:
name: 703A07CDA458E3445392.mlwpath: /opt/CAPEv2/storage/binaries/487848eb204530335e8f677b7e071b28adfc8224db08f92de3fd1fc9558a3732crc32: DC5B8BB5md5: 703a07cda458e34453920a031aa40b04sha1: 456e9abe2409cc890be2d619c327a225a44a1cd5sha256: 487848eb204530335e8f677b7e071b28adfc8224db08f92de3fd1fc9558a3732sha512: 73d30cd5e9e970a7bbb956c93df07b821a2dd11f0445375720a4cf270678018172f1743e44f5e707edddad6d341944923dd15f90769cb3a8a15de41a876a8b89ssdeep: 768:CG2zLvkY9NdgLri5IoZSAzcwf3qeevdc9mnYIuC:M/vjNdgLu5IoZSAzcwf3qeevdcInqtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1CF13E662F6D898C5F92712B42D3AED12001BBEAD57788A5E3586761F85B33831437F0Bsha3_384: 2399a713793e714de684e6c61b961c791df629095c055af800a2c0ec33bddec895da51422ed70d506b7f1b4b9b5c3a74ep_bytes: 64a100000000558bec6aff6860334000timestamp: 2006-05-07 22:03:43
Version Info:
CompanyName: BraveChan SoftwareFileDescription: BraveChan Software utilityFileVersion: 1, 0, 3, 5InternalName: BraveChan SoftwareLegalCopyright: Copyright (C)2014 BraveChan SoftwareLegalTrademarks: Copyright (C)2014 BraveChan SoftwareOriginalFilename: chutility.exePrivateBuild: ProductName: BraveChan SoftwareProductVersion: 1, 0, 3, 5Comments: Copyright (C)2014 BraveChan SoftwareSpecialBuild: NoTranslation: 0x0409 0x04b2

Win32/Kryptik.DEQH also known as:

Bkav	W32.AIDetect.malware2
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Trojan.Ipatre.1
FireEye	Generic.mg.703a07cda458e344
CAT-QuickHeal	Downloader.Upatre.14931
ALYac	Gen:Trojan.Ipatre.1
Cylance	Unsafe
K7AntiVirus	Trojan ( 004c16241 )
K7GW	Trojan ( 004c16241 )
Cybereason	malicious.da458e
Baidu	Win32.Trojan.Kryptik.jc
Cyren	W32/Upatre.J.gen!Eldorado
Symantec	Downloader.Upatre!gm
ESET-NOD32	a variant of Win32/Kryptik.DEQH
APEX	Malicious
Kaspersky	Trojan-Downloader.Win32.Upatre.vxc
BitDefender	Gen:Trojan.Ipatre.1
NANO-Antivirus	Trojan.Win32.Upatre.dqhfev
Avast	FileRepMalware
Tencent	Trojan.Win32.BitCoinMiner.la
Ad-Aware	Gen:Trojan.Ipatre.1
Sophos	ML/PE-A + Troj/Dyreza-ET
Comodo	TrojWare.Win32.TrojanDownloader.Upatre.MAUA@5rueuc
DrWeb	Trojan.Upatre.184
VIPRE	Trojan.Win32.Upatre.qv (v)
TrendMicro	TROJ_UPATRE.TOMB00000005
McAfee-GW-Edition	Upatre-FACM!703A07CDA458
Emsisoft	Gen:Trojan.Ipatre.1 (B)
GData	Gen:Trojan.Ipatre.1
Jiangmin	TrojanDownloader.Upatre.py
Avira	HEUR/AGEN.1143231
MAX	malware (ai score=89)
ViRobot	Trojan.Win32.Agent.32768.KX
Microsoft	TrojanDownloader:Win32/Upatre.AF
Cynet	Malicious (score: 99)
AhnLab-V3	Trojan/Win32.Upatre.R145122
McAfee	Upatre-FACM!703A07CDA458
VBA32	BScope.Backdoor.Androm
Malwarebytes	Trojan.Upatre
TrendMicro-HouseCall	TROJ_UPATRE.TOMB00000005
Rising	Malware.Heuristic!ET#99% (RDMK:cmRtazrY8mOVlMCT8Cy4H50C+zPO)
Ikarus	Trojan-Downloader.Win32.Upatre
Fortinet	W32/Waski.A!tr
BitDefenderTheta	Gen:NN.ZexaF.34294.cq0@aOtKJFki
AVG	FileRepMalware
Panda	Trj/Genetic.gen
CrowdStrike	win/malicious_confidence_100% (D)