Categories: Malware

Should I remove “Win32/Kryptik.HITE”?

The Win32/Kryptik.HITE is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/Kryptik.HITE virus can do?

Behavioural detection: Executable code extraction – unpacking
Dynamic (imported) function loading detected
Yara rule detections observed from a process memory dump/dropped files/CAPE
Creates RWX memory
CAPE extracted potentially suspicious content
Authenticode signature is invalid
Uses Windows utilities for basic functionality

How to determine Win32/Kryptik.HITE?


File Info:
name: D732B127B45D0775FE90.mlwpath: /opt/CAPEv2/storage/binaries/e040cad9eb0815e34d1133d52e15d5a254fabbff250972329303d0cc1da15c35crc32: 50D35E4Emd5: d732b127b45d0775fe9040bc4ef83813sha1: 977df879a204997daf4e6f35a587f09c6b7d9863sha256: e040cad9eb0815e34d1133d52e15d5a254fabbff250972329303d0cc1da15c35sha512: 2e88e05b9d87643b2aad7eb28975ce012210c73763d6b412c948ad98733acd99e2ca3bddfc88930a5b575f736e3d5006ded251a9a8e3b3f213c99a6c09477cc0ssdeep: 6144:Yv8YZ9OVe1IibjDX3H53/l35wXDy5T/Ac6/dpVrYaEF3mQPjwhfA8RuTjqASfpvK:Yv8Yye1IiLX3H53pe5Nz63Kf6TWXptype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T171B401D49742CDCEC1A218F0E1EFA794711169350FA866827695CDAC9BB07D1EF23A0Fsha3_384: 24b04c8830a75387559fe14f6799cb4efd277afa1384fbeeb85ee046c4bb099e6e53496af4e90597d8ac56e54d3e0427ep_bytes: 558bec6aff68680b4700680e66400064timestamp: 2019-12-11 14:06:38
Version Info:
0: [No Data]

Win32/Kryptik.HITE also known as:

Bkav	W32.AIDetect.malware1
Lionic	Trojan.Multi.Generic.4!c
MicroWorld-eScan	Trojan.GenericKD.45446214
FireEye	Generic.mg.d732b127b45d0775
CAT-QuickHeal	Trojan.GenericRI.S18329054
ALYac	Trojan.Trickster.Gen
Cylance	Unsafe
Zillya	Trojan.Kryptik.Win32.2816238
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	Trojan:Win32/Deapax.408ca28e
K7GW	Riskware ( 0040eff71 )
K7AntiVirus	Riskware ( 0040eff71 )
Cyren	W32/Trojan.RLUQ-1065
Symantec	Trojan Horse
ESET-NOD32	a variant of Win32/Kryptik.HITE
APEX	Malicious
Paloalto	generic.ml
Kaspersky	HEUR:Trojan.Win32.Deapax.gen
BitDefender	Trojan.GenericKD.45446214
NANO-Antivirus	Trojan.Win32.Deapax.ihrytm
Avast	Win32:DropperX-gen [Drp]
Tencent	Win32.Trojan.Deapax.Wqco
Ad-Aware	Trojan.GenericKD.45446214
Sophos	ML/PE-A
Comodo	Malware@#iup952w6cz6r
DrWeb	Trojan.Packed.140
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	TrojanSpy.Win32.TRICKBOT.OCIT
McAfee-GW-Edition	GenericRXNI-PU!D732B127B45D
Emsisoft	Trojan.GenericKD.45446214 (B)
Ikarus	Trojan-Spy.Win32.TrickBot
Jiangmin	Trojan.Deapax.bd
Webroot	W32.Trojan.Gen
Avira	TR/Spy.TrickBot.ofeiu
MAX	malware (ai score=87)
Antiy-AVL	Trojan/Generic.ASMalwS.3112521
Kingsoft	Win32.Troj.Undef.(kcloud)
Microsoft	Trojan:Win32/Trickbot.AT
ViRobot	Trojan.Win32.Z.Woreflint.499712
GData	Trojan.GenericKD.45446214
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win32.Trickbot.C4299390
Acronis	suspicious
McAfee	GenericRXNI-PU!D732B127B45D
VBA32	Malware-Cryptor.Grygoryi.3
Malwarebytes	Trojan.TrickBot
TrendMicro-HouseCall	TrojanSpy.Win32.TRICKBOT.OCIT
Rising	Trojan.Generic@ML.100 (RDML:0IHanLbvvfRIt1zkHjECUQ)
Yandex	Trojan.Deapax!kuCnRt7ESy8
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.106299893.susgen
Fortinet	W32/Deapax.F614!tr
BitDefenderTheta	Gen:NN.ZexaF.34294.EqW@auQ4rEoi
AVG	Win32:DropperX-gen [Drp]
Cybereason	malicious.7b45d0
Panda	Trj/Agent.JMA