Categories: Malware

What is “Win32/Kryptik.GICA”?

The Win32/Kryptik.GICA is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/Kryptik.GICA virus can do?

Executable code extraction
Creates RWX memory
Unconventionial language used in binary resources: Danish
The binary likely contains encrypted or compressed data.
Collects information to fingerprint the system
Anomalous binary characteristics

How to determine Win32/Kryptik.GICA?


File Info:
crc32: FA1941BCmd5: 796cdcc860ef6592295c0254920bb8e6name: 796CDCC860EF6592295C0254920BB8E6.mlwsha1: 1e056f2b991e8d86dc99b91ff22aed1eef60b24bsha256: 7ec835938bc1632a3e309984618c74baf9c3dd62c6be4e4b10bb77f30333b1c9sha512: 2eb1dd0cf71ae6304a5eaa7be643ac249cb832e7b0299a291f156d61839851ba0d4ce7eb3e09b8cc40c92c3d8dc2ed424fa230a1e25fca7b7dca5fc3c564639dssdeep: 6144:Q+YrOIBjacl3PQ/jaiUCXWgfPBRwasxX:4OCjaclQPGgtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
ProductVersion: 2.13.5.66Translation: 0x0844 0x16d3

Win32/Kryptik.GICA also known as:

Bkav	W32.AIDetect.malware1
K7AntiVirus	Trojan ( 00516fdf1 )
Elastic	malicious (high confidence)
DrWeb	Trojan.PWS.Stealer.23949
ClamAV	Win.Packer.Crypter-6539596-1
CAT-QuickHeal	Trojan.Chapak.ZZ5
McAfee	GenericRXFZ-BO!796CDCC860EF
Malwarebytes	Trojan.Emotet
Zillya	Trojan.Coins.Win32.364
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (D)
Alibaba	Ransom:Win32/Gandcrab.cb7af58e
K7GW	Trojan ( 00516fdf1 )
Cybereason	malicious.860ef6
Cyren	W32/Ransom.KH.gen!Eldorado
Symantec	Packed.Generic.525
ESET-NOD32	a variant of Win32/Kryptik.GICA
Zoner	Trojan.Win32.90165
APEX	Malicious
Avast	Win32:Malware-gen
Cynet	Malicious (score: 100)
Kaspersky	HEUR:Trojan-Ransom.Win32.GandCrypt.gen
BitDefender	Trojan.Mint.Jamg.C
NANO-Antivirus	Trojan.Win32.Stealer.felbdn
SUPERAntiSpyware	Ransom.GandCrab/Variant
MicroWorld-eScan	Trojan.Mint.Jamg.C
Tencent	Trojan.Win32.Gandcrab.n
Ad-Aware	Trojan.Mint.Jamg.C
Sophos	ML/PE-A + Mal/GandCrab-B
Comodo	TrojWare.Win32.Chapak.HT@7q630j
BitDefenderTheta	Gen:NN.ZexaF.34628.mu0@a0j3IfpO
McAfee-GW-Edition	BehavesLike.Win32.Generic.dc
FireEye	Generic.mg.796cdcc860ef6592
Emsisoft	Trojan.Mint.Jamg.C (B)
Jiangmin	Trojan.PSW.Coins.rz
Webroot	W32.Ransom.Gandcrab
Avira	HEUR/AGEN.1121566
eGambit	Unsafe.AI_Score_97%
Microsoft	Ransom:Win32/Gandcrab
Arcabit	Trojan.Mint.Jamg.C
AegisLab	Trojan.Win32.GandCrypt.trnG
ZoneAlarm	HEUR:Trojan-Ransom.Win32.GandCrypt.gen
GData	Trojan.Mint.Jamg.C
AhnLab-V3	Win-Trojan/Gandcrab02.Exp
Acronis	suspicious
VBA32	BScope.TrojanRansom.GandCrypt
MAX	malware (ai score=95)
Panda	Trj/Genetic.gen
TrendMicro-HouseCall	Ransom_GANDCRAB.SMALY-3
Rising	Ransom.GandCrab!8.F355 (TFE:5:AsfsUAjwQ3C)
Yandex	Trojan.GenAsa!hkWeyjEykNI
SentinelOne	Static AI – Malicious PE
MaxSecure	Ransomeware.CRAB.gen
Fortinet	W32/GenKryptik.CNAR!tr
AVG	Win32:Malware-gen
Qihoo-360	Win32/Ransom.GandCrab.HwoCEpsA