Categories: Malware

Win32/Kryptik.GXMG malicious file

The Win32/Kryptik.GXMG is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/Kryptik.GXMG virus can do?

Executable code extraction
Creates RWX memory
A process created a hidden window
A scripting utility was executed
Attempts to stop active services
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Win32/Kryptik.GXMG?


File Info:
crc32: 39CFCA13md5: 81947164b878eb0d93f0d0377719cb4bname: 81947164B878EB0D93F0D0377719CB4B.mlwsha1: 7d08061c1a090c1c1c7241c328af93545e6de30fsha256: 589509e084f251632d9a7099db4f476d93dd1185577b9636b23d37ab256609dcsha512: 8ab64d90be75d525005021bcd0c6d6df5a7925b5b4bd543799f63d668302fcde0e395c96279d29a853740bb17fea5ba6525da4787b43ca696f39aafd6121d288ssdeep: 6144:wYRbOlNHro7+XETN6OjHpl+vQDZdQ5glPyIMv8Z7EJxkt6YN:w2OT98wO7pl/TQEaIQwgQIYNtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
0: [No Data]

Win32/Kryptik.GXMG also known as:

Bkav	W32.AIDetect.malware1
K7AntiVirus	Trojan ( 00559fc91 )
Elastic	malicious (high confidence)
DrWeb	Trojan.DownLoader30.27560
ClamAV	Win.Dropper.Tofsee-7433714-0
CAT-QuickHeal	Ransom.Stop.MP4
McAfee	Trojan-FRKJ!81947164B878
Cylance	Unsafe
Zillya	Trojan.Kryptik.Win32.2012855
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	Ransom:Win32/generic.ali2000010
K7GW	Trojan ( 00559fc91 )
Cybereason	malicious.4b878e
Cyren	W32/Kryptik.ALO.gen!Eldorado
Symantec	Packed.Generic.561
ESET-NOD32	a variant of Win32/Kryptik.GXMG
APEX	Malicious
Avast	Win32:TrojanX-gen [Trj]
Cynet	Malicious (score: 100)
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Trojan.GenericKDZ.58629
NANO-Antivirus	Trojan.Win32.Zenpak.gehzfg
MicroWorld-eScan	Trojan.GenericKDZ.58629
Tencent	Win32.Trojan-dropper.Agent.Dzjo
Ad-Aware	Trojan.GenericKDZ.58629
Sophos	Mal/Generic-S + Mal/GandCrypt-A
Comodo	Malware@#2ukkyuabf3s1f
F-Secure	Heuristic.HEUR/AGEN.1106357
BitDefenderTheta	Gen:NN.ZexaF.34236.zC0@aKVFiXbi
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	Ransom.Win32.SHADE.THJBEAI
McAfee-GW-Edition	BehavesLike.Win32.Generic.gm
FireEye	Generic.mg.81947164b878eb0d
Emsisoft	Trojan.GenericKDZ.58629 (B)
SentinelOne	Static AI – Suspicious PE
Jiangmin	Trojan.Zenpak.agg
Avira	HEUR/AGEN.1106357
Antiy-AVL	Trojan/Win32.Zenpak
Microsoft	Ransom:Win32/Shade.PA!MTB
Arcabit	Trojan.Generic.DE505
ZoneAlarm	HEUR:Trojan.Win32.Generic
GData	Trojan.GenericKDZ.58629
AhnLab-V3	Trojan/Win.MalPe.X2055
Acronis	suspicious
VBA32	Malware-Cryptor.Azorult.gen
MAX	malware (ai score=89)
Malwarebytes	Trojan.MalPack.GS
Panda	Trj/GdSda.A
TrendMicro-HouseCall	Ransom.Win32.SHADE.THJBEAI
Rising	Trojan.Generic@ML.90 (RDML:SZGVEttpCqj+87U6IC33Hw)
Yandex	Trojan.Kryptik!pMRIvi4glb8
Ikarus	Trojan-Ransom.Shade
Fortinet	W32/CoinMiner.HPDF!tr
AVG	Win32:TrojanX-gen [Trj]
Paloalto	generic.ml