Categories: Malware

Win32/Kryptik.HBTW malicious file

The Win32/Kryptik.HBTW is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/Kryptik.HBTW virus can do?

Executable code extraction
Attempts to connect to a dead IP:Port (1 unique times)
Creates RWX memory
Possible date expiration check, exits too soon after checking local time
A process created a hidden window
Unconventionial language used in binary resources: Japanese
The binary likely contains encrypted or compressed data.
Uses Windows utilities for basic functionality
Anomalous binary characteristics
Uses suspicious command line tools or Windows utilities

Related domains:

pokemonfans.best

How to determine Win32/Kryptik.HBTW?


File Info:
crc32: F777E933md5: 42987c3bc07fa0e3a3ba16f92f4f9d4dname: soft.exesha1: e8af5b3703c73b5ea459cfd1ab90ae6d7a8de25dsha256: 6a7b1367b61161822652bf16c2f01baeb101121d1c8e3c8289ce460b0d30881esha512: 4d4b5afee1a6c9b4a96318f2a7e5d5b1a611638d7dc87cb2d555c45a7b10f29c238bccbe9383ad66926a800f874e3f6f53daf775e728d305f441bc93310f9d3assdeep: 6144:XiSIBmxp8mF8wSYghqXFP3s1r0Jy7viWNuIzEkN:X/IOp8W8wSRCP3ElnskNtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
0: [No Data]

Win32/Kryptik.HBTW also known as:

Bkav	W32.AIDetectVM.malware
MicroWorld-eScan	Trojan.GenericKDZ.65351
FireEye	Generic.mg.42987c3bc07fa0e3
Qihoo-360	HEUR/QVM10.1.C74B.Malware.Gen
Cylance	Unsafe
AegisLab	Trojan.Win32.Malicious.4!c
Sangfor	Malware
BitDefender	Trojan.GenericKDZ.65351
K7GW	Trojan ( 005620411 )
Cybereason	malicious.bc07fa
TrendMicro	Trojan.Win32.BANDIT.SM
BitDefenderTheta	Gen:NN.ZexaF.34098.uOW@amXo8VeG
ESET-NOD32	a variant of Win32/Kryptik.HBTW
TrendMicro-HouseCall	Trojan.Win32.BANDIT.SM
Paloalto	generic.ml
GData	Trojan.GenericKDZ.65351
Kaspersky	UDS:DangerousObject.Multi.Generic
Alibaba	Trojan:Win32/Azorult.71ad1c4b
APEX	Malicious
Rising	Trojan.Kryptik!8.8 (CLOUD)
Endgame	malicious (high confidence)
Emsisoft	Trojan.GenericKDZ.65351 (B)
Invincea	heuristic
Trapmine	malicious.high.ml.score
Sophos	Mal/RyPack-A
SentinelOne	DFI – Malicious PE
Jiangmin	Backdoor.Agent.hfk
Avira	TR/Crypt.Agent.ykqjc
MAX	malware (ai score=83)
Microsoft	Trojan:Win32/Azorult.RSV!MTB
Arcabit	Trojan.Generic.DFF47
AhnLab-V3	Malware/Win32.RL_Trojan.R328059
ZoneAlarm	UDS:DangerousObject.Multi.Generic
Acronis	suspicious
VBA32	BScope.Trojan.AET.281105
ALYac	Trojan.GenericKDZ.65351
Ad-Aware	Trojan.GenericKDZ.65351
Malwarebytes	Trojan.MalPack.GS
Panda	Trj/GdSda.A
eGambit	Unsafe.AI_Score_73%
Fortinet	W32/Kryptik.HBNS!tr
AVG	Win32:MalwareX-gen [Trj]
Avast	Win32:MalwareX-gen [Trj]
CrowdStrike	win/malicious_confidence_100% (W)
MaxSecure	Trojan.Malware.300983.susgen