Categories: Malware

About “Win32/Kryptik.HEST” infection

The Win32/Kryptik.HEST is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/Kryptik.HEST virus can do?

Executable code extraction
Creates RWX memory
The binary likely contains encrypted or compressed data.
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Win32/Kryptik.HEST?


File Info:
crc32: A7DC1F25md5: a95d24937acb3420ee94493db298b295name: picture4.pngsha1: 28aefcd3225e0d51de2dd25428745a36850d0ea1sha256: 67b43b4c24de48616d165ac7d5f75e70191c66f5e9b204ce752904f475451518sha512: 96b283a40c2aaf1bbe8251e0b7f506dced5f0cbd855faed2d03e7e28ef2fe515e9e8d0724af6f2db1b3a000a6566186f2d6ee87a325936b14a0759fa01c7da3fssdeep: 3072:G+wtdjeUA69DFsjo8afEvZ/JC97/HrkvE0bN6P1ktYVQEUfCX1J92S:G+wxA85sjo8acVg94zMjVQnk2type: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
LegalCopyright: xa9 Microsoft Corporation. All rights reservInternalName: oflFileVersion: 6.6.0000.License: This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License; see www.gnu.org/copyleft/gpl.html. CompanyName: Microsoft CorporationLegalTrademarks: GnuWin32xae, Grepxae, grepxaeWWW: http://www.gnu.org/software/grep/grep.htmlProductName: OflProductVersion: 6.6.0000.FileDescription: ODBC (3.0) driver for FoxProOriginalFilename: oflor32Translation: 0x0409 0x04e4

Win32/Kryptik.HEST also known as:

Bkav	W32.AIDetectVM.malware1
MicroWorld-eScan	Trojan.GenericKD.34143382
CAT-QuickHeal	Trojandownloader.Cridex
ALYac	Trojan.Agent.Emotet
Malwarebytes	Trojan.Dridex
VIPRE	LooksLike.Win32.Dridex.e (v)
Sangfor	Malware
K7AntiVirus	Trojan ( 005669021 )
BitDefender	Trojan.GenericKD.34143382
K7GW	Trojan ( 005669021 )
Cybereason	malicious.3225e0
TrendMicro	TROJ_GEN.R049C0WGA20
Symantec	Packed.Generic.553
ESET-NOD32	a variant of Win32/Kryptik.HEST
APEX	Malicious
Paloalto	generic.ml
Kaspersky	HEUR:Trojan-Downloader.Win32.Cridex.vho
Alibaba	TrojanDownloader:Win32/Kryptik.75a4644a
NANO-Antivirus	Trojan.Win32.Cridex.hnqewd
AegisLab	Trojan.Win32.Cridex.a!c
Ad-Aware	Trojan.GenericKD.34143382
Emsisoft	Trojan.GenericKD.34143382 (B)
F-Secure	Trojan.TR/Crypt.Agent.drcec
DrWeb	Trojan.Dridex.715
Invincea	heuristic
Trapmine	malicious.high.ml.score
FireEye	Generic.mg.a95d24937acb3420
Sophos	Mal/Generic-S
SentinelOne	DFI – Malicious PE
Cyren	W32/Trojan.UTGX-9361
Avira	TR/Crypt.Agent.drcec
Microsoft	Trojan:Win32/Emotet.LK!ml
Endgame	malicious (high confidence)
Arcabit	Trojan.Generic.D208FC96
ZoneAlarm	HEUR:Trojan-Downloader.Win32.Cridex.vho
GData	Trojan.GenericKD.34143382
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win32.Dridex.R344316
Acronis	suspicious
McAfee	Drixed-FIY!A95D24937ACB
MAX	malware (ai score=81)
VBA32	BScope.TrojanDownloader.Cridex
Cylance	Unsafe
Panda	Trj/GdSda.A
TrendMicro-HouseCall	TROJ_GEN.R049C0WGA20
Rising	Downloader.Cridex!8.F70 (CLOUD)
Ikarus	Trojan.Win32.Crypt
eGambit	Unsafe.AI_Score_95%
Fortinet	W32/Cridex.HEST!tr.dldr
BitDefenderTheta	Gen:NN.ZexaF.34138.mu0@au9XJLpi
AVG	Win32:TrojanX-gen [Trj]
Avast	Win32:TrojanX-gen [Trj]
CrowdStrike	win/malicious_confidence_100% (W)
Qihoo-360	Generic/HEUR/QVM20.1.8D49.Malware.Gen