Categories: Malware

What is “Win32/Kryptik.HERY”?

The Win32/Kryptik.HERY is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/Kryptik.HERY virus can do?

Sample contains Overlay data
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine Win32/Kryptik.HERY?


File Info:
name: 14DBFD8292816D291D9C.mlwpath: /opt/CAPEv2/storage/binaries/0ec192cf7fb60b97cd4eee64cb9f33834bc724e77c611c84822ff07073b4e316crc32: E524702Fmd5: 14dbfd8292816d291d9c3eab4c060255sha1: 2a12d47385c3ed937d03c1eb8d74f84e1eeab3f2sha256: 0ec192cf7fb60b97cd4eee64cb9f33834bc724e77c611c84822ff07073b4e316sha512: 68adaea68af2da3e90f72a27e66dc4a6f87769552c9d2175e8144eceffb387218591be8f8606b8425d26613fd7c03da8cba0ff948a68044445b744a754794a0cssdeep: 49152:GXN3jQj5lvMzqxrcQipyx5M3qXU2SPN5UEAUw5KPyrsOjwqSw1Gjg+Ai:GXN3jQvZYpyxGqXU2eHz++Aitype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1EF366B50FDDB50F9EA476A3048AB937F273066199736CAC7C640DFA2FC17AE11A32215sha3_384: 0fb86d33f6c295b6bb91de41bacb00f1d8062ff49bd78959dbd42c3fe7ca9198c1beffa41e5d7db25bdc6dc41830edfdep_bytes: e91bd8ffffcccccccccccccccccccccctimestamp: 1970-01-01 00:00:00
Version Info:
0: [No Data]

Win32/Kryptik.HERY also known as:

Lionic	Trojan.MSIL.Crysan.m!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.GenericKD.36977498
ClamAV	Win.Packed.Wacatac-9842594-0
FireEye	Generic.mg.14dbfd8292816d29
McAfee	GenericRXAA-AA!14DBFD829281
Cylance	Unsafe
Zillya	Trojan.Llac.Win32.65812
Sangfor	Backdoor.MSIL.Crysan.gen
K7AntiVirus	Trojan ( 0056a3411 )
Alibaba	Backdoor:Win32/Crysan.cdbddaed
K7GW	Trojan ( 0056a3411 )
CrowdStrike	win/malicious_confidence_90% (W)
Arcabit	Trojan.Generic.D2343B5A
Cyren	W32/ABRisk.OEVB-4743
Symantec	ML.Attribute.HighConfidence
tehtris	Generic.Malware
ESET-NOD32	a variant of Win32/Kryptik.HERY
APEX	Malicious
Paloalto	generic.ml
Cynet	Malicious (score: 100)
Kaspersky	UDS:Backdoor.MSIL.Crysan.gen
BitDefender	Trojan.GenericKD.36977498
NANO-Antivirus	Trojan.Win32.Quasar.honlft
Avast	Win32:Malware-gen
Tencent	Malware.Win32.Gencirc.10ce025b
Ad-Aware	Trojan.GenericKD.36977498
Emsisoft	Trojan.GenericKD.36977498 (B)
DrWeb	Trojan.Siggen9.56514
VIPRE	Trojan.GenericKD.36977498
TrendMicro	TROJ_GEN.R002C0WEQ22
McAfee-GW-Edition	BehavesLike.Win32.Trojan.rh
Sophos	Mal/Generic-S
Ikarus	Trojan.Win32.Crypt
Jiangmin	Trojan.Encoder.wu
Avira	TR/Crypt.XPACK.Gen
Antiy-AVL	Trojan/Generic.ASMalwS.5039
Microsoft	Trojan:Win32/Wacatac.B!ml
ZoneAlarm	UDS:Backdoor.MSIL.Crysan.gen
GData	Trojan.GenericKD.36977498
Google	Detected
AhnLab-V3	Malware/Gen.RL_Reputation.R363253
VBA32	Backdoor.MSIL.Crysan
ALYac	Trojan.GenericKD.36977498
MAX	malware (ai score=80)
Malwarebytes	Backdoor.AsyncRAT
TrendMicro-HouseCall	TROJ_GEN.R002C0WEQ22
Rising	Trojan.Generic@AI.93 (RDML:AxutyR8qikcuQLBQDVqiUA)
Yandex	Trojan.Kryptik!0ZNpUJuG1+o
SentinelOne	Static AI – Suspicious PE
MaxSecure	Trojan.Malware.118752594.susgen
Fortinet	W32/Kryptik.HERY!tr
BitDefenderTheta	Gen:NN.ZexaF.34698.@xZ@aK!2Vx
AVG	Win32:Malware-gen