Malware

About “Win32/Kryptik.HHFN” infection

Malware Removal

The Win32/Kryptik.HHFN is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32/Kryptik.HHFN virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Reads data out of its own binary image
  • A process created a hidden window
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

How to determine Win32/Kryptik.HHFN?


File Info:

crc32: 8F7D1BFC
md5: 01af66ad9ead3071b17cecaa3906955f
name: upload_file
sha1: 3255989a385887ed3d650685e7540f1ed36bfe9d
sha256: 5de53b92c1f20755b6ff2884cdfdbbca9d1a4b9d138f5b7e559c5605460b277c
sha512: 2fb6b41ce9954c90da9bcd4db69e2bb1e755e7e8ba633d0af75cf08b7d2c27ad09726a455cec553a2f0ef26652b410f38b0ced97c08cd59cedf9ce86eced32d8
ssdeep: 6144:OwZTW72EPdePZatieXnJCeLhecVqH8oklATXQFqGavHHdd+oJ:fAiPB85ZCescV1l6TQ9aGY
type: PE32 executable (console) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Win32/Kryptik.HHFN also known as:

BkavW32.AIDetectVM.malware1
Elasticmalicious (high confidence)
MicroWorld-eScanTrojan.GenericKD.44343835
FireEyeGeneric.mg.01af66ad9ead3071
Qihoo-360Generic/HEUR/QVM10.2.0903.Malware.Gen
ALYacTrojan.GenericKD.44343835
CylanceUnsafe
SangforMalware
K7AntiVirusTrojan ( 005723f21 )
AlibabaTrojanSpy:Win32/Kryptik.afa2073c
K7GWTrojan ( 005723f21 )
InvinceaMal/Generic-S
SymantecML.Attribute.HighConfidence
APEXMalicious
Paloaltogeneric.ml
KasperskyHEUR:Trojan-Spy.Win32.Noon.gen
BitDefenderTrojan.GenericKD.44343835
NANO-AntivirusVirus.Win32.Gen.ccmw
AegisLabTrojan.Multi.Generic.4!c
TencentWin32.Trojan-spy.Noon.Eex
Ad-AwareTrojan.GenericKD.44343835
EmsisoftTrojan.GenericKD.44343835 (B)
DrWebTrojan.Siggen10.46271
VIPREVirTool.Win32.Obfuscator.da!k (v)
TrendMicroTROJ_GEN.R023C0PK620
McAfee-GW-EditionRDN/Generic.grp
SophosMal/Generic-S
SentinelOneStatic AI – Malicious PE
GDataTrojan.GenericKD.44343835
JiangminTrojanSpy.Noon.qiu
WebrootW32.Trojan.Gen
AviraHEUR/AGEN.1129588
ArcabitTrojan.Generic.D2A4A21B
ViRobotTrojan.Win32.Z.Woreflint.365056
ZoneAlarmHEUR:Trojan-Spy.Win32.Noon.gen
MicrosoftTrojan:Win32/Ymacco.AA5D
McAfeeRDN/Generic.grp
MAXmalware (ai score=88)
VBA32Trojan.Woreflint
MalwarebytesTrojan.Crypt
ESET-NOD32a variant of Win32/Kryptik.HHFN
TrendMicro-HouseCallTROJ_GEN.R023C0PK620
RisingTrojan.GenKryptik!8.AA55 (TFE:5:XcZemnxhvNU)
IkarusTrojan.Inject
FortinetMalicious_Behavior.SB
BitDefenderThetaGen:NN.ZexaF.34590.wuZ@a8GVLrgi
AVGWin32:MalwareX-gen [Trj]
PandaTrj/CI.A
CrowdStrikewin/malicious_confidence_90% (W)

How to remove Win32/Kryptik.HHFN?

Win32/Kryptik.HHFN removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment