Win32/Kryptik.GTBV malicious file

The Win32/Kryptik.GTBV is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/Kryptik.GTBV virus can do?

Executable code extraction
Creates RWX memory
HTTP traffic contains suspicious features which may be indicative of malware related traffic
Performs some HTTP requests
A process attempted to delay the analysis task by a long amount of time.
Attempts to repeatedly call a single API many times in order to delay analysis time
Steals private information from local Internet browsers
Collects information about installed applications
Checks the CPU name from registry, possibly for anti-virtualization
Harvests credentials from local FTP client softwares
Harvests information related to installed instant messenger clients
Harvests information related to installed mail clients
Collects information to fingerprint the system

Related domains:

prohomedevelopers.com

ip-api.com

How to determine Win32/Kryptik.GTBV?


File Info:
crc32: 8C60C7F9
md5: 7cd2864987530627b56c537740bfc0a1
name: 7CD2864987530627B56C537740BFC0A1.mlw
sha1: abda25a71817f295d345f513fa13cc197b4178a8
sha256: 36fe19ce3476ce6e9047192fdecc05cf131e773113cb97206691c177896b5157
sha512: 1fd00f299810b4305b12b826e1da7a7a7f3d0ae873e9fc88f229f62eb81184330922054b36bfe1b8d04e8ffebe2a1b9fa306eaf47a560b61af77f4eb834b048c
ssdeep: 12288:CWHCFRhla47A4Tmgc+19X5F3CyCWiUMMXEZurLjlsM5HUh/EJ5upPsRbNPRYv0:CxtpTI+xVCDWiUtCurHltG2YpPkZPy
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
0: [No Data]

Win32/Kryptik.GTBV also known as:

Bkav	W32.AIDetect.malware1
Lionic	Trojan.Win32.Chapak.4!c
Elastic	malicious (high confidence)
CAT-QuickHeal	Ransom.Stop.P5
ALYac	Trojan.Brsecmon.1
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	Ransom:Win32/GandCrab.cc4c4df3
K7GW	Trojan ( 0054e3751 )
K7AntiVirus	Trojan ( 0054e3751 )
Cyren	W32/Chapak.G.gen!Eldorado
Symantec	Packed.Generic.525
ESET-NOD32	a variant of Win32/Kryptik.GTBV
APEX	Malicious
Avast	Win32:Malware-gen
Cynet	Malicious (score: 100)
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Trojan.Brsecmon.1
NANO-Antivirus	Trojan.Win32.Chapak.fqfybx
MicroWorld-eScan	Trojan.Brsecmon.1
Tencent	Win32.Trojan.Generic.Amco
Ad-Aware	Trojan.Brsecmon.1
Sophos	Mal/Generic-S
BitDefenderTheta	Gen:NN.ZexaF.34142.7yW@aWSwWNl
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	Trojan.Win32.SODINOK.SM.hp
McAfee-GW-Edition	BehavesLike.Win32.Generic.dh
FireEye	Generic.mg.7cd2864987530627
Emsisoft	Trojan.Brsecmon.1 (B)
SentinelOne	Static AI – Suspicious PE
Avira	HEUR/AGEN.1102735
Antiy-AVL	Trojan/Generic.ASMalwS.2B842E2
Microsoft	Ransom:Win32/GandCrab.AD!MTB
Arcabit	Trojan.Brsecmon.1
ZoneAlarm	HEUR:Trojan.Win32.Generic
GData	Trojan.Brsecmon.1
AhnLab-V3	Malware/Win32.Generic.C3246472
Acronis	suspicious
McAfee	Sodinokibi!7CD286498753
MAX	malware (ai score=99)
VBA32	Trojan.Zonidel
Malwarebytes	Trojan.MalPack.GS.Generic
Panda	Trj/GdSda.A
TrendMicro-HouseCall	Trojan.Win32.SODINOK.SM.hp
Rising	Trojan.Generic@ML.98 (RDML:tSh2sAQEITip2vylJ898+w)
Yandex	Trojan.Agent!Y+FDcQNe6sA
Ikarus	Trojan.Win32.Krypt
MaxSecure	Ransomeware.CRAB.gen
Fortinet	W32/Kryptik.GTHD!tr
AVG	Win32:Malware-gen
Paloalto	generic.ml

How to remove Win32/Kryptik.GTBV?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Win32/Kryptik.GTBV malicious file