Malware

Win32/Kryptik.GBEL malicious file

Malware Removal

The Win32/Kryptik.GBEL is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32/Kryptik.GBEL virus can do?

  • Executable code extraction
  • Injection (inter-process)
  • Injection (Process Hollowing)
  • Creates RWX memory
  • The binary likely contains encrypted or compressed data.
  • Executed a process and injected code into it, probably while unpacking
  • Attempts to repeatedly call a single API many times in order to delay analysis time
  • Creates or sets a registry key to a long series of bytes, possibly to store a binary or malware config
  • Installs itself for autorun at Windows startup
  • Checks the presence of disk drives in the registry, possibly for anti-virtualization

How to determine Win32/Kryptik.GBEL?


File Info:

crc32: 82A94CFA
md5: 208d4c940f2a746190738d76bbfaf3c2
name: 208D4C940F2A746190738D76BBFAF3C2.mlw
sha1: 82666a84e18fd491fc8370bddae301ca73af137d
sha256: 0d7da2beeaad316132af4bc19cfe08f9d15b6156b720570b4b0e6ac19e718426
sha512: 4253f5c2cc05ec1498a5dced179c532da831eace939a1269fab347a09deed8842531d9e5a7cd7aee0cca4dfe218d3fe942d20ecf7b0957c61c34add3905b6dbd
ssdeep: 12288:Fn3EnVQvFsNalDbwa04jGC4r+G8bMZ8ohpsaPiwd/HQDXMEmoXla:CUFsNatj0o31G8bMJhGiiwd/BEmoX
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: Copyright (C) 2017
FileVersion: 1.0.0.1
ProductVersion: 1.0.0.1
Translation: 0x0809 0x04b0

Win32/Kryptik.GBEL also known as:

BkavW32.AIDetect.malware1
K7AntiVirusTrojan ( 0053305e1 )
Elasticmalicious (high confidence)
DrWebTrojan.MulDrop7.57365
CynetMalicious (score: 100)
CAT-QuickHealTrojan.Chapak.ZZ5
ALYacTrojan.BRMon.Gen.3
CylanceUnsafe
ZillyaBackdoor.Androm.Win32.48606
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_90% (D)
AlibabaRansom:Win32/Gandcrab.d50138cb
K7GWTrojan ( 0053305e1 )
Cybereasonmalicious.40f2a7
CyrenW32/S-72038380!Eldorado
SymantecPacked.Generic.525
ESET-NOD32a variant of Win32/Kryptik.GBEL
APEXMalicious
AvastWin32:Malware-gen
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderTrojan.BRMon.Gen.3
NANO-AntivirusTrojan.Win32.Kryptik.ewrkli
SUPERAntiSpywareTrojan.Agent/Gen-Injector
MicroWorld-eScanTrojan.BRMon.Gen.3
TencentMalware.Win32.Gencirc.10c88f81
Ad-AwareTrojan.BRMon.Gen.3
SophosMal/Generic-S
ComodoMalware@#x61lvoap716t
BitDefenderThetaGen:NN.ZexaF.34670.Iu0@ai5jtDii
VIPRETrojan.Win32.Generic!BT
TrendMicroRansom_HPGANDCRAB.SMG2
McAfee-GW-EditionBehavesLike.Win32.Generic.hc
FireEyeGeneric.mg.208d4c940f2a7461
EmsisoftTrojan.BRMon.Gen.3 (B)
SentinelOneStatic AI – Malicious PE
JiangminBackdoor.Androm.vtd
AviraHEUR/AGEN.1102735
eGambitUnsafe.AI_Score_99%
MicrosoftRansom:Win32/Gandcrab.SF!MTB
ArcabitTrojan.BRMon.Gen.3
GDataTrojan.BRMon.Gen.3
AhnLab-V3Trojan/Win32.RansomCrypt.R220586
McAfeeTrojan-FOSS!208D4C940F2A
MAXmalware (ai score=99)
VBA32BScope.Trojan.MulDrop
MalwarebytesTrojan.PasswordStealer
PandaTrj/CI.A
TrendMicro-HouseCallRansom_HPGANDCRAB.SMG2
RisingMalware.Obscure/Heur!1.A89E (CLOUD)
YandexTrojan.GenAsa!KoBZToE0hIA
IkarusTrojan-Banker.UrSnif
MaxSecureRansomeware.CRAB.gen
FortinetW32/Kryptik.GBFP!tr
AVGWin32:Malware-gen
Paloaltogeneric.ml
Qihoo-360HEUR/QVM10.1.53A3.Malware.Gen

How to remove Win32/Kryptik.GBEL?

Win32/Kryptik.GBEL removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment