Malware

Win32/Kryptik.HBRV (file analysis)

Malware Removal

The Win32/Kryptik.HBRV is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Win32/Kryptik.HBRV virus can do?

  • Sample contains Overlay data
  • Unconventionial binary language: Russian
  • Unconventionial language used in binary resources: Russian
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Anomalous binary characteristics

How to determine Win32/Kryptik.HBRV?



File Info:

name: 0FFD85C88B202D68B519.mlw
path: /opt/CAPEv2/storage/binaries/05a56f765404fe322041c4d4f4123f1acb6f48ebe77998533ff2ab24816ba4d7
crc32: F30C61B5
md5: 0ffd85c88b202d68b519d5e77f278d5d
sha1: 507bfa52f31e282ec5cd6c1387f023437a6405cb
sha256: 05a56f765404fe322041c4d4f4123f1acb6f48ebe77998533ff2ab24816ba4d7
sha512: bfd984fd50ee5c56b18dac76aec99ea16c0390d2f6baa04933b3aac20cd757644ccbeceb15f0fbe84af64a4c83069dbff40f2d00bb59dbc5e80e5523451dc515
ssdeep: 3072:QCItgTsDAJJRjO13ahGCbe0skXL4zbLFZhh2D+0caj3kyRACV:QCIiJJc301XMvn9ozV
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T18714CF8B945F4B01EC2F9EBB4295D03D188C6B2A5B430F9FC6D5CE89F663CB04615A71
sha3_384: efde4c0787084c5e946de7782ed1d7c3b24569c0a2469d1d0a5e09fed227bb83db0135545268ed6556edbf85b936ae67
ep_bytes: 0535dc070089cce9d99b0500000000e9
timestamp: 2013-04-02 14:39:44


Version Info:

CompanyName: Корпорация  Майкрософт
FileDescription: Редактор личных символов
Translation: 0x0419 0x04b0

Win32/Kryptik.HBRV also known as:

BkavW32.AIDetectMalware
LionicTrojan.Win32.ShipUp.4!c
Elasticmalicious (high confidence)
DrWebTrojan.Redirect.140
MicroWorld-eScanGen:Variant.Cafiko.1
ClamAVWin.Packed.ZBot-9783420-1
FireEyeGeneric.mg.0ffd85c88b202d68
ALYacGen:Variant.Cafiko.1
MalwarebytesCrypt.Trojan.Malicious.DDS
SangforRansom.Win32.Cerber_23.se
K7AntiVirusTrojan ( 005a62e91 )
AlibabaTrojan:Win32/Kryptik.e121
K7GWTrojan ( 005a62e91 )
Cybereasonmalicious.88b202
BitDefenderThetaGen:NN.ZexaF.36250.mS1@a0YRyncc
VirITTrojan.Win32.Generic.ALWV
CyrenW32/Agent.BKB.gen!Eldorado
SymantecML.Attribute.HighConfidence
tehtrisGeneric.Malware
ESET-NOD32a variant of Win32/Kryptik.HBRV
APEXMalicious
CynetMalicious (score: 100)
KasperskyTrojan.Win32.ShipUp.bqh
BitDefenderGen:Variant.Cafiko.1
AvastWin32:Gepys-E [Trj]
TencentTrojan.Win32.Kryptik.16000652
TACHYONTrojan/W32.Shipup.200208
EmsisoftGen:Variant.Cafiko.1 (B)
F-SecureTrojan.TR/Obfuscate.adj
VIPREGen:Variant.Cafiko.1
TrendMicroTROJ_KRYPTK.SML3
McAfee-GW-EditionBehavesLike.Win32.PWSZbot.ch
Trapminemalicious.high.ml.score
SophosMal/ZAccess-CG
SentinelOneStatic AI – Malicious PE
GDataWin32.Trojan.PSE.DS729D
AviraTR/Obfuscate.adj
Antiy-AVLTrojan/Win32.ShipUp
ArcabitTrojan.Cafiko.1
ViRobotTrojan.Win.Z.Cafiko.200208.WI
ZoneAlarmTrojan.Win32.ShipUp.bqh
GoogleDetected
AhnLab-V3Dropper/Win.Injector.R582960
McAfeeGenericRXAX-FB!0FFD85C88B20
MAXmalware (ai score=85)
Cylanceunsafe
PandaTrj/Hexas.HEU
TrendMicro-HouseCallTROJ_KRYPTK.SML3
RisingTrojan.Agent!1.6830 (CLASSIC)
IkarusTrojan.Win32.Crypt
MaxSecureTrojan.ShipUp.bqa
FortinetW32/Wacatac.B!tr
AVGWin32:Gepys-E [Trj]
DeepInstinctMALICIOUS
CrowdStrikewin/malicious_confidence_100% (W)

How to remove Win32/Kryptik.HBRV?

Win32/Kryptik.HBRV removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment