Categories: Malware

What is “Win32/Kryptik.EUEV”?

The Win32/Kryptik.EUEV is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/Kryptik.EUEV virus can do?

Executable code extraction
Compression (or decompression)
Creates RWX memory
Reads data out of its own binary image
Unconventionial language used in binary resources: Bulgarian
The binary likely contains encrypted or compressed data.
Attempts to identify installed AV products by registry key
Anomalous binary characteristics

How to determine Win32/Kryptik.EUEV?


File Info:
crc32: A2E7B0E3md5: 78aad4a497a0508db9c96fad99760191name: 78AAD4A497A0508DB9C96FAD99760191.mlwsha1: c5c195e5e8c45910e51b953dacfd69c838cddd42sha256: dd49e42db4132fa666efef9d73734eca4620da490cc66c5e53ee8437debd30ffsha512: fcd78bd34e9638670d3cccc92835a9072cc38bc1a005d8e4fe8bc02a099db79b4c4ea109b54eda1390a88713db9b314b2f0c9f48d2557262bd6c8f1bbfb46b0dssdeep: 3072:4qP2EOz0WsAPL7+WIkOQ2K4EMfP8sx+cGr7ljfyMUJgE0Ro2XBZq0oAacg6hmST:4E0D7gkOQ2KY31+LIyE0K2nvad6hmSTtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
LegalCopyright: Copyright xa9 2014InternalName: CedeFileVersion: 2017.2017CompanyName: TaLF's ProjectProductName: TaLF's Project ChargesProductVersion: 2017.2017FileDescription: EclipsingOriginalFilename: Benefited.exe

Win32/Kryptik.EUEV also known as:

Bkav	W32.AIDetect.malware1
K7AntiVirus	Trojan ( 004e0aa21 )
Elastic	malicious (high confidence)
DrWeb	Trojan.AVKill.61359
Cynet	Malicious (score: 100)
CAT-QuickHeal	Ransom.Generic.WR4
ALYac	Gen:Trojan.ProcessHijack.oq0@aWmUXqpO
Cylance	Unsafe
Zillya	Trojan.CryptGen.Win32.1
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (D)
Alibaba	Trojan:Win32/Kryptik.836b6d37
K7GW	Trojan ( 004e0aa21 )
Cybereason	malicious.497a05
Baidu	Win32.Trojan.Kryptik.zh
Cyren	W32/S-853a912a!Eldorado
Symantec	Ransom.Cryptolock!g21
ESET-NOD32	a variant of Win32/Kryptik.EUEV
APEX	Malicious
Avast	Win32:Trojan-gen
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Gen:Trojan.ProcessHijack.oq0@aWmUXqpO
NANO-Antivirus	Trojan.Win32.AVKill.ebvmcc
MicroWorld-eScan	Gen:Trojan.ProcessHijack.oq0@aWmUXqpO
Tencent	Malware.Win32.Gencirc.10c0715b
Ad-Aware	Gen:Trojan.ProcessHijack.oq0@aWmUXqpO
Sophos	Mal/Generic-S
Comodo	Malware@#2c4bd6jt44lil
BitDefenderTheta	Gen:NN.ZexaF.34628.oq0@aWmUXqpO
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	Ransom_CRYPTESLA.SMB1
McAfee-GW-Edition	BehavesLike.Win32.Emotet.dc
FireEye	Generic.mg.78aad4a497a0508d
Emsisoft	Gen:Trojan.ProcessHijack.oq0@aWmUXqpO (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	Trojan.Yakes.irg
Webroot	W32.Trojan.Dynamer
Avira	HEUR/AGEN.1111647
eGambit	Generic.Malware
Kingsoft	Win32.Troj.Tpyn.v.(kcloud)
Microsoft	Trojan:Win32/Dynamer!ac
AegisLab	Hacktool.Win32.Tpyn.3!c
GData	Gen:Trojan.ProcessHijack.oq0@aWmUXqpO
TACHYON	Trojan/W32.Yakes.241664.E
AhnLab-V3	Win-Trojan/Teslacrypt.1339F9E.X1654
Acronis	suspicious
McAfee	Ransomware-FIS!78AAD4A497A0
MAX	malware (ai score=100)
VBA32	BScope.Trojan.AVKill
Panda	Trj/GdSda.A
TrendMicro-HouseCall	Ransom_CRYPTESLA.SMB1
Rising	Trojan.Dynamer!8.3A0 (CLOUD)
Ikarus	Win32.Cryptor
MaxSecure	Trojan.Malware.9242708.susgen
Fortinet	W32/Agent.F30!tr
AVG	Win32:Trojan-gen
Qihoo-360	Win32/Trojan.Generic.HwcBrGUA