Malware

Win32/Kryptik.GLDX malicious file

Malware Removal

The Win32/Kryptik.GLDX is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32/Kryptik.GLDX virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Unconventionial language used in binary resources: Tatar
  • The binary likely contains encrypted or compressed data.
  • Attempts to modify proxy settings
  • Collects information to fingerprint the system

Related domains:

babaiko.site

How to determine Win32/Kryptik.GLDX?


File Info:

crc32: 1252E7C5
md5: 21ed779afaf6df867f4c7f9b613483cd
name: 21ED779AFAF6DF867F4C7F9B613483CD.mlw
sha1: c0fc87a28ae865317af412b6b9dee4140f2b99c2
sha256: 15da7a18843a6a8dd33e56669c0301156dcc9b3da55120accde8a30eae87bc55
sha512: 22b5db34154af16bf32b4f226bfe76247bd91e0fd14f76200291c14dd86e2963614ddcbe252c8e8ddebcbdd86b2f8dced42b61476d4fc213bfdd5a2c4464ac7b
ssdeep: 3072:Lh3Xi8ZQ3LFchBzQGZ57JnpWo4+N4BuPSGH10uB:Lh3nZeh88mGovuBuPSE1B
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

FileVersion: 4.6.3
ProductVersion: 1.0.0.11

Win32/Kryptik.GLDX also known as:

BkavW32.AIDetect.malware1
K7AntiVirusTrojan ( 0053d5971 )
LionicTrojan.Win32.GandCrypt.tqKd
Elasticmalicious (high confidence)
DrWebWin32.CloudNet.14
CynetMalicious (score: 100)
ALYacGen:Heur.Mint.Titirez.mu0@piSzL0gG
CylanceUnsafe
ZillyaTrojan.Coins.Win32.1166
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (D)
AlibabaTrojanPSW:Win32/Coins.2d15f48d
K7GWTrojan ( 0053d5971 )
Cybereasonmalicious.afaf6d
CyrenW32/Kryptik.EZT.gen!Eldorado
SymantecPacked.Generic.525
ESET-NOD32a variant of Win32/Kryptik.GLDX
APEXMalicious
AvastWin32:Malware-gen
KasperskyTrojan-PSW.Win32.Coins.ltz
BitDefenderGen:Heur.Mint.Titirez.mu0@piSzL0gG
NANO-AntivirusTrojan.Win32.Stealer.filasq
ViRobotTrojan.Win32.U.Agent.239104.C
MicroWorld-eScanGen:Heur.Mint.Titirez.mu0@piSzL0gG
TencentWin32.Trojan-qqpass.Qqrob.Hrpl
Ad-AwareGen:Heur.Mint.Titirez.mu0@piSzL0gG
SophosMal/Generic-S + Mal/GandCrab-G
ComodoTrojWare.Win32.TrojanDownloader.Bandit.B@7vti3z
BitDefenderThetaGen:NN.ZexaF.34170.mu0@aiSzL0gG
TrendMicroTrojanSpy.Win32.CLIPBANKER.SMA
McAfee-GW-EditionBehavesLike.Win32.Generic.dh
FireEyeGeneric.mg.21ed779afaf6df86
EmsisoftGen:Heur.Mint.Titirez.mu0@piSzL0gG (B)
SentinelOneStatic AI – Malicious PE
AviraHEUR/AGEN.1102747
Antiy-AVLTrojan/Generic.ASMalwS.282BB83
MicrosoftRansom:Win32/StopCrypt!ml
SUPERAntiSpywareTrojan.Agent/Gen-Malpack
GDataGen:Heur.Mint.Titirez.mu0@piSzL0gG
AhnLab-V3Trojan/Win32.Gandcrab.R238171
Acronissuspicious
McAfeeTrojan-FQDU!21ED779AFAF6
MAXmalware (ai score=88)
VBA32BScope.Trojan-Dropper.Injector
MalwarebytesTrojan.MalPack.GS
PandaTrj/GdSda.A
TrendMicro-HouseCallTrojanSpy.Win32.CLIPBANKER.SMA
RisingTrojan.Generic@ML.99 (RDML:Z/w2dm8oEjBaQ7BtrP3Zfg)
YandexTrojan.GenAsa!7JFJ0B7gNtw
IkarusTrojan-Banker.UrSnif
FortinetW32/Kryptik.GLOO!tr
AVGWin32:Malware-gen
Paloaltogeneric.ml

How to remove Win32/Kryptik.GLDX?

Win32/Kryptik.GLDX removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment