Categories: Malware

Win32/Kryptik.HCYE removal tips

The Win32/Kryptik.HCYE is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/Kryptik.HCYE virus can do?

Executable code extraction
Creates RWX memory
A process attempted to delay the analysis task.
Attempts to connect to a dead IP:Port (6 unique times)
Reads data out of its own binary image
A process created a hidden window
Drops a binary and executes it
Performs some HTTP requests
Unconventionial language used in binary resources: Hindi
Detects Sandboxie through the presence of a library
Detects VirtualBox through the presence of a library
Detects VMware through the presence of a library
Network activity contains more than one unique useragent.
Detects VirtualBox through the presence of a file
Detects VMware through the presence of a file
Attempts to modify proxy settings
Creates a copy of itself
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

b-dns.se

apps.identrust.com

isrg.trustid.ocsp.identrust.com

ocsp.int-x3.letsencrypt.org

How to determine Win32/Kryptik.HCYE?


File Info:
crc32: E65F9778md5: c2b3cbaab65740acf8439d45a4abc821name: diamonds.exesha1: 910f83d98973e9ad2db56bab6b19f68ef03b751esha256: 60c5f438fa53ed71e05a386212bb73af52257b7ca359a479b30645fc912d3c99sha512: 501558c4e6c67035fc83bf62b81de4dc849bc0fbd121925284113130937a693fe8b43c3afd6802c044629560638fc0ac185047c874db9acaff748e5897336f79ssdeep: 6144:SB/84ZOX7l9kJFZsThg9D95w3/k5rScE:SBk+OLl9kPZAMD95M/wrtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
0: [No Data]

Win32/Kryptik.HCYE also known as:

Bkav	W32.AIDetectVM.malware
MicroWorld-eScan	Trojan.GenericKD.33725163
FireEye	Generic.mg.c2b3cbaab65740ac
McAfee	Artemis!C2B3CBAAB657
ALYac	Trojan.GenericKD.33725163
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
Sangfor	Malware
BitDefender	Trojan.GenericKD.33725163
Cybereason	malicious.98973e
BitDefenderTheta	Gen:NN.ZexaF.34106.qqW@aSizBqaG
ESET-NOD32	a variant of Win32/Kryptik.HCYE
APEX	Malicious
Avast	Win32:Trojan-gen
ClamAV	Win.Malware.Generic-7688662-0
GData	Trojan.GenericKD.33725163
Kaspersky	Trojan-Spy.Win32.SpyEyes.bkgw
Alibaba	TrojanSpy:Win32/SpyEyes.ae341220
AegisLab	Trojan.Win32.Malicious.4!c
Tencent	Win32.Trojan-spy.Spyeyes.Syhn
Endgame	malicious (high confidence)
Emsisoft	Trojan.GenericKD.33725163 (B)
Comodo	Malware@#1rb01l2ku8ru6
Invincea	heuristic
McAfee-GW-Edition	BehavesLike.Win32.Generic.dh
Trapmine	malicious.moderate.ml.score
Sophos	Mal/Generic-S
SentinelOne	DFI – Malicious PE
Cyren	W32/Agent.BTA.gen!Eldorado
MaxSecure	Trojan.Malware.300983.susgen
MAX	malware (ai score=85)
Antiy-AVL	Trojan/Win32.Wacatac
Arcabit	Trojan.Generic.D2029AEB
AhnLab-V3	Trojan/Win32.MalPe.R334234
ZoneAlarm	Trojan-Spy.Win32.SpyEyes.bkgw
Microsoft	Trojan:Win32/Occamy.C
Acronis	suspicious
Ad-Aware	Trojan.GenericKD.33725163
Malwarebytes	Trojan.MalPack.GS
Panda	Trj/GdSda.A
TrendMicro-HouseCall	TROJ_GEN.R03FH0CDR20
Rising	Trojan.Kryptik!8.8 (CLOUD)
Ikarus	Trojan.Win32.Gandcrab
eGambit	Unsafe.AI_Score_67%
Fortinet	W32/Kryptik.HCYE!tr
Webroot	W32.Trojan.Gen
AVG	Win32:Trojan-gen
Paloalto	generic.ml
CrowdStrike	win/malicious_confidence_100% (W)