Categories: Malware

Win32/Kryptik.HFEF (file analysis)

The Win32/Kryptik.HFEF is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/Kryptik.HFEF virus can do?

Executable code extraction
Compression (or decompression)
Creates RWX memory
Sniffs keystrokes
Installs itself for autorun at Windows startup
Creates a hidden or system file
Attempts to identify installed AV products by registry key
Collects information to fingerprint the system
Anomalous binary characteristics

How to determine Win32/Kryptik.HFEF?


File Info:
crc32: F38BE905md5: 250a71c8d62efd2a726194adddf955d0name: 250A71C8D62EFD2A726194ADDDF955D0.mlwsha1: bdf96de94e56701b626bf2b48d21c2467f8039b7sha256: 7409cc811f88455e360a645b886acf6779eed0e1f31dc6a9998c6dd63abe9881sha512: 001ceac47d14254c7546d2f4f439090f66a9db650a1d9198555a7843dcf05e3bd61abe28824fa12aba84daf70b0da45c87efc4e69141be11408aed80a1fbfddessdeep: 12288:Sx0cAzPKA53r8DMskFZMpByvXGEAw2go45FB5uuUYrypQb:SOhP9wNuCpBwXGEdFdQMVtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
0: [No Data]

Win32/Kryptik.HFEF also known as:

Bkav	W32.AIDetect.malware2
Elastic	malicious (high confidence)
DrWeb	Trojan.Siggen13.5599
Cynet	Malicious (score: 100)
ALYac	Trojan.Glupteba.gen
Cylance	Unsafe
Zillya	Trojan.RunDll.Win32.1002
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	Trojan:Win32/Glupteba.c58c9aca
K7GW	Trojan ( 0056c1701 )
Cybereason	malicious.94e567
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Kryptik.HFEF
APEX	Malicious
Avast	Win32:Malware-gen
Kaspersky	Trojan-Banker.Win32.RTM.ksj
BitDefender	Trojan.GenericKD.46073326
NANO-Antivirus	Virus.Win32.Gen.ccmw
MicroWorld-eScan	Trojan.GenericKD.46073326
Tencent	Malware.Win32.Gencirc.11a8945d
Ad-Aware	Trojan.GenericKD.46073326
Sophos	Mal/Generic-R + Mal/EncPk-APW
BitDefenderTheta	Gen:NN.ZexaF.34670.GuW@aO1Hgxj
McAfee-GW-Edition	BehavesLike.Win32.Shohdi.hh
FireEye	Generic.mg.250a71c8d62efd2a
Emsisoft	Trojan.GenericKD.46073326 (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	Trojan.Rundll.abr
Avira	TR/AD.Redaman.vsbuu
eGambit	Unsafe.AI_Score_99%
Kingsoft	Win32.Heur.KVM007.a.(kcloud)
Microsoft	Trojan:Win32/Glupteba.MJ!MTB
AegisLab	Trojan.Win32.Malicious.4!c
GData	Trojan.GenericKD.46073326
AhnLab-V3	Trojan/Win32.Wacatac.C4170183
McAfee	W32/PinkSbot-HE!250A71C8D62E
MAX	malware (ai score=80)
VBA32	Trojan.RunDll
Malwarebytes	Malware.Heuristic.1001
Panda	Trj/CI.A
TrendMicro-HouseCall	TROJ_GEN.R002C0DDB21
Rising	Trojan.GenKryptik!8.AA55 (CLOUD)
Yandex	Trojan.Kryptik!ShVSBtUqfOE
Ikarus	Trojan.Win32.Crypt
Fortinet	W32/Kryptik.HERT!tr
AVG	Win32:Malware-gen
Paloalto	generic.ml
Qihoo-360	Win32/Backdoor.Glupteba.HxMBgwsA