Categories: Malware

Win32/Kryptik.FSOT malicious file

The Win32/Kryptik.FSOT is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/Kryptik.FSOT virus can do?

Executable code extraction
Injection (inter-process)
Injection (Process Hollowing)
Creates RWX memory
Executed a process and injected code into it, probably while unpacking
Attempts to repeatedly call a single API many times in order to delay analysis time
Anomalous binary characteristics

How to determine Win32/Kryptik.FSOT?


File Info:
crc32: D3843865md5: 685c6834f8f81948822762cd13a48604name: 685C6834F8F81948822762CD13A48604.mlwsha1: 6fd2bc3fd0a9d438d75b3399d19e8e7fba75c63csha256: 5a58e4a4910fbbb8092af231cba2e7cf9f9c0acf6ec88ccb7e0566fcf7b03415sha512: 44f7e5085f72120d76a6e6fd702a82b5618b56de34ae691822d6d6cbe7e9dc512c407b31164bc63d9001ae07b259bc4367125fd9fe5de16ac319f88d6ec650d8ssdeep: 3072:5wZ5AzQDvn9zdO7hdgg4jsBG6Hk4iS1DgRf:275DVzdOPdhG6biS1Dgtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
LegalCopyright: Di vefuyopiwucuOriginalFilename: yifo.exeFileVersion: 34, 9, 4, 8Comments: Yimojilu xataProductVersion: 34, 9, 4, 8Translation: 0x0409 0x04b0

Win32/Kryptik.FSOT also known as:

Bkav	W32.AIDetect.malware1
Elastic	malicious (high confidence)
DrWeb	Trojan.Siggen7.10717
Cynet	Malicious (score: 100)
CAT-QuickHeal	Ransom.Gen.A4
ALYac	Trojan.Ransom.Spora
Cylance	Unsafe
Zillya	Trojan.GenKryptik.Win32.6547
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	Ransom:Win32/Spora.457d40d0
K7GW	Trojan ( 0051418e1 )
K7AntiVirus	Trojan ( 0051418e1 )
Symantec	Ransom.Spora
ESET-NOD32	a variant of Win32/Kryptik.FSOT
APEX	Malicious
Avast	Win32:Malware-gen
ClamAV	Win.Trojan.Emotet-6341517-0
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Trojan.GenericKDZ.39080
NANO-Antivirus	Trojan.Win32.Androm.eoyhyz
SUPERAntiSpyware	Trojan.Agent/Gen-Dynamer
MicroWorld-eScan	Trojan.GenericKDZ.39080
Tencent	Malware.Win32.Gencirc.10bbad82
Ad-Aware	Trojan.GenericKDZ.39080
Sophos	Mal/Generic-S
Comodo	Malware@#73pjip1a2e00
BitDefenderTheta	Gen:NN.ZexaF.34628.lq0@a8RfENai
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	Ransom_SPORA.THEAH
McAfee-GW-Edition	Ransom-Spora.b
FireEye	Generic.mg.685c6834f8f81948
Emsisoft	Trojan.Emotet (A)
SentinelOne	Static AI – Malicious PE
Jiangmin	Trojan.Generic.bcjnb
Webroot	W32.Trojan.Gen
Avira	HEUR/AGEN.1117301
eGambit	Unsafe.AI_Score_95%
Kingsoft	Win32.Troj.Undef.(kcloud)
Microsoft	Ransom:Win32/Spora.B
Arcabit	Trojan.Generic.D98A8
AegisLab	Trojan.Win32.Generic.4!c
GData	Win32.Worm.Spora.N
TACHYON	Ransom/W32.Spora.184320
AhnLab-V3	Trojan/Win32.Spora.R200938
McAfee	Ransom-Spora.b
MAX	malware (ai score=100)
VBA32	BScope.TrojanPSW.Steam
Malwarebytes	Trojan.PasswordStealer
Panda	Trj/GdSda.A
TrendMicro-HouseCall	Ransom_SPORA.THEAH
Rising	Trojan.Kryptik!1.AA2B (KTSE)
Ikarus	Trojan-Dropper.Win32.Danabot
Fortinet	W32/Kryptik.HCUD!tr
AVG	Win32:Malware-gen
Paloalto	generic.ml
Qihoo-360	Win32/Trojan.Generic.HwoCOvsA