Malware

Win32/Kryptik.GOGM (file analysis)

Malware Removal

The Win32/Kryptik.GOGM is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32/Kryptik.GOGM virus can do?

  • The binary likely contains encrypted or compressed data.
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Win32/Kryptik.GOGM?


File Info:

crc32: 21185DEB
md5: 1e70ea4d3120929330896756bacc25d9
name: 1E70EA4D3120929330896756BACC25D9.mlw
sha1: 6d5fc9c29deb53efc8a4cc8edc874ae503871044
sha256: 904d4aadd9a0568207341285eb609458d74a22aaf988276cb49c06e5f8dc6b99
sha512: 77a41cdcaf67a0d49651be27081e724a0877e7e810ea9fecad781660c2d521424504d87b7499b7b2984d378add2dc4f8107b817b5d364f7648fbbe2a702160fa
ssdeep: 98304:ECNZATOTwGxDTxF2InGA/7zj5sJwHI83Nl/u:wTytDTDL1L5sJuI0Pu
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Win32/Kryptik.GOGM also known as:

BkavW32.AIDetect.malware1
K7AntiVirusTrojan ( 0056cc351 )
Elasticmalicious (high confidence)
DrWebTrojan.PackedENT.124
CynetMalicious (score: 100)
CAT-QuickHealTrojan.Wacatac.S15862760
ALYacGen:Variant.Razy.711258
CylanceUnsafe
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_80% (D)
K7GWTrojan ( 0056cc351 )
Cybereasonmalicious.d31209
CyrenW32/Graftor.RC.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Kryptik.GOGM
APEXMalicious
AvastWin32:Evo-gen [Susp]
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderGen:Variant.Razy.711258
NANO-AntivirusVirus.Win32.Gen.ccmw
MicroWorld-eScanGen:Variant.Razy.711258
Ad-AwareGen:Variant.Razy.711258
SophosML/PE-A + Troj/AGent-BFHO
BitDefenderThetaGen:NN.ZexaF.34294.ytW@aiUsuSn
McAfee-GW-EditionBehavesLike.Win32.Generic.wc
FireEyeGeneric.mg.1e70ea4d31209293
EmsisoftGen:Variant.Razy.711258 (B)
SentinelOneStatic AI – Suspicious PE
AviraTR/Crypt.EPACK.Gen2
eGambitUnsafe.AI_Score_100%
Antiy-AVLTrojan/Generic.ASBOL.C639
MicrosoftTrojan:Win32/Sabsik.FL.B!ml
ArcabitTrojan.Razy.DADA5A
GDataGen:Variant.Razy.711258
AhnLab-V3Trojan/Win32.Kryptik.R346633
Acronissuspicious
McAfeeGenericRXHI-ZQ!1E70EA4D3120
MAXmalware (ai score=86)
VBA32BScope.Trojan.PackedENT
MalwarebytesTrojan.Crypt.Generic
RisingMalware.Heuristic!ET#100% (RDMK:cmRtazqmuc1eAK0M6ZBJvd+g01cQ)
IkarusTrojan.Win32.Crypt
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Razy.BSSG!tr
AVGWin32:Evo-gen [Susp]

How to remove Win32/Kryptik.GOGM?

Win32/Kryptik.GOGM removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment