Categories: Malware

Win32/Kryptik.HBCO (file analysis)

The Win32/Kryptik.HBCO is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/Kryptik.HBCO virus can do?

Executable code extraction
Creates RWX memory
Unconventionial language used in binary resources: Sindhi
The binary likely contains encrypted or compressed data.
Attempts to repeatedly call a single API many times in order to delay analysis time
Steals private information from local Internet browsers
Harvests credentials from local FTP client softwares
Harvests information related to installed instant messenger clients
Collects information to fingerprint the system

Related domains:

greenlandsurround.com

How to determine Win32/Kryptik.HBCO?


File Info:
crc32: D9C4C909md5: 3613157ec5992b8293086c294a45b12fname: yo.exesha1: 3ea65cfaf3b291dcaf4cd803dfec9c3701dbfb11sha256: 07b4a990c3602db959388f79281d06c17c23dfeade8a4caaaf8b67e5f4391719sha512: e430770a5be38f50d770d08b9bd66cdc935c37ffb682e38481e8fafbd10b5192e51e76c2e43700fe541aa959b71e3fb5272e6e1d3ba4e6423e600fb0f62989b9ssdeep: 12288:XQ9SWTNryCSLOVSbkN1Opv9XhGFjPvLrFzXfacOjICt:XQ9SWheCoqSQ8RhGFjnhvacd2type: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
0: [No Data]

Win32/Kryptik.HBCO also known as:

DrWeb	Trojan.PWS.Siggen2.43543
MicroWorld-eScan	Trojan.GenericKD.33277164
Qihoo-360	Win32/Trojan.bc2
McAfee	RDN/Generic.grp
Cylance	Unsafe
Sangfor	Malware
K7AntiVirus	Trojan ( 005608fb1 )
BitDefender	Trojan.GenericKD.33277164
K7GW	Trojan ( 005608fb1 )
Cybereason	malicious.af3b29
BitDefenderTheta	Gen:NN.ZexaF.34090.JSW@auDV2cmG
Symantec	Trojan.Gen.2
ESET-NOD32	a variant of Win32/Kryptik.HBCO
Paloalto	generic.ml
Kaspersky	Trojan.Win32.Chapak.eirt
Avast	Win32:TrojanX-gen [Trj]
Tencent	Win32.Trojan.Chapak.Lhmx
Ad-Aware	Trojan.GenericKD.33277164
Emsisoft	Trojan.GenericKD.33277164 (B)
F-Secure	Trojan.TR/AD.VidarStealer.jqrop
Invincea	heuristic
McAfee-GW-Edition	BehavesLike.Win32.Generic.hc
Trapmine	malicious.high.ml.score
FireEye	Generic.mg.3613157ec5992b82
Sophos	Mal/Generic-S
Ikarus	Trojan.Win32.Krypt
Jiangmin	Backdoor.Tofsee.bnq
Webroot	W32.Malware.Gen
Avira	TR/AD.VidarStealer.jqrop
Fortinet	W32/Kryptik.HBCF!tr
Endgame	malicious (high confidence)
Arcabit	Trojan.Generic.D1FBC4EC
ZoneAlarm	Trojan.Win32.Chapak.eirt
Microsoft	Trojan:Win32/Cridex.DSK!MTB
AhnLab-V3	Trojan/Win32.RL_MalPe.R325904
Acronis	suspicious
ALYac	Trojan.GenericKD.33277164
APEX	Malicious
Rising	Trojan.GenKryptik!8.AA55 (CLOUD)
SentinelOne	DFI – Malicious PE
eGambit	Unsafe.AI_Score_99%
GData	Trojan.GenericKD.33277164
AVG	Win32:TrojanX-gen [Trj]
Panda	Trj/GdSda.A
CrowdStrike	win/malicious_confidence_100% (W)